CVE-2024-22164

Summary

CVE-2024-22164 is a denial-of-service vulnerability affecting Splunk Enterprise Security (ES) versions below 7.1.2. An attacker can exploit this issue by sending oversized investigation attachments to the affected system, causing the Investigation to become inaccessible and resulting in a DoS condition. The attachment endpoint in Splunk ES fails to enforce appropriate size limits, allowing the attacker to abuse this functionality and disrupt the targeted system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.