CVE-2017-8452

HIGH

Kibana < 5.2.1 - Denial of Service via File Descriptor Leak

Title source: llm
STIX 2.1

Description

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.elastic.co/community/security

Scores

CVSS v3 7.5
EPSS 0.0038
EPSS Percentile 59.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-769 CWE-775
Status published
Products (2)
elastic/kibana < 5.2.0
Elastic/Kibana before 5.2.1
Published Jun 16, 2017
Tracked Since Feb 18, 2026