Elastic Metricbeat Denial-of-Service Vulnerability via Improper Input Validation

A denial-of-service vulnerability has been identified in Elastic Metricbeat versions 7.x, 8.x (up to and including 8.19.9), and 9.x (up to and including 9.1.9 and 9.2.3). The issue arises from improper validation of array indices, allowing attackers to manipulate input data and send specially crafted payloads to the Graphite server or Zookeeper server metricsets. Additionally, the Prometheus helper module in Metricbeat has improper input validation that can also lead to denial-of-service by allowing malformed metric data to be processed.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, where the application becomes unresponsive or unavailable.

Remediation

Users can upgrade to Metricbeat versions 8.19.10, 9.1.10, or 9.2.4 to address this vulnerability.