GHSA-2mj3-6grc-px38 Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration

• Go github.com/elastic/beats/v7: >= 7.7.0, < 8.19.9 → fixed in 8.19.9 • Go github.com/elastic/beats/v7: >= 9.0.0, < 9.1.9 → fixed in 9.1.9 • Go github.com/elastic/beats/v7: >= 9.2.0, < 9.2.3 → fixed in 9.2.3 • Go github.com/elastic/beats/v7: < 7.0.0-alpha2.0.20251204214633-dd3af18220bf → fixed in 7.0.0-alpha2.0.20251204214633-dd3af18220bf • Go github.com/elastic/beats: <= 7.6.2 (no fix yet)

Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process via either a malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration.