CVEvulnerability

CVE-2017-8452

7.5 HIGH Published 2017-06-16 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-06-16
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses: CWE-769, CWE-775

Description

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes.

Affected configurations

• elastic kibana (<= 5.2.0)

Weakness · not in database (1)

CWE-769

Weakness · CWE (1)

CWE-775 Missing Release of File Descriptor or Handle after Effective Lifetime weakness

References