High severityNVD Advisory· Published Jul 22, 2014· Updated May 6, 2026
CVE-2014-4326
CVE-2014-4326
Description
Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
logstashRubyGems | >= 1.0.14, < 1.4.2 | 1.4.2 |
Affected products
27cpe:2.3:a:elastic:logstash:1.1.2:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:a:elastic:logstash:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- github.com/advisories/GHSA-8qhq-rq4j-8prjghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-4326ghsaADVISORY
- www.elastic.co/community/security/nvdVendor Advisory
- web.archive.org/web/20140804031140/http://www.elasticsearch.org/blog/logstash-1-4-2ghsaWEB
- web.archive.org/web/20201207013408/http://www.securityfocus.com/archive/1/532841/100/0/threadedghsaWEB
- www.elastic.co/community/securityghsaWEB
- www.elasticsearch.org/blog/logstash-1-4-2/nvd
- www.securityfocus.com/archive/1/532841/100/0/threadednvd
News mentions
0No linked articles in our index yet.