CyberRota Analysis
AI-GeneratedA vulnerability in Elasticsearch permits authenticated users with read-only privileges to exploit a crafted search request, leading to unbounded memory allocation that bypasses existing memory controls. This can result in an out-of-memory condition, ultimately causing a denial of service by terminating the affected node process. Organizations using Elasticsearch should prioritize addressing this issue to prevent potential service disruptions.
Original NVD Description
A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.