CVE-2024-52981
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Apr 8, 2025
CWE ID 400
Summary
CVE-2024-52981 is a vulnerability affecting Elasticsearch. It arises from a large recursion issue involving Well-KnownText formatted strings and nested GeometryCollection objects, leading to a stack overflow. This can potentially enable an attacker to cause the Elasticsearch server to crash or become unresponsive, resulting in a denial-of-service condition. To mitigate this issue, it is recommended to update Elasticsearch to the latest version or implement measures to limit recursion depth.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Elasticsearch
Affected Vendors
- Elastic