High severity7.5NVD Advisory· Published Dec 8, 2017· Updated May 13, 2026
CVE-2017-11480
CVE-2017-11480
Description
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/elastic/beatsGo | < 5.6.4 | 5.6.4 |
github.com/elastic/beatsGo | >= 6.0.0-alpha1, < 6.0.0 | 6.0.0 |
Affected products
1- Elastic/Packetbeatv5Range: before 5.6.4
Patches
1aeca65779d57Fix missing length check in PgSQL (#5457)
2 files changed · +4 −0
CHANGELOG.asciidoc+1 −0 modified@@ -64,6 +64,7 @@ https://github.com/elastic/beats/compare/v6.0.0-beta2...master[Check the HEAD di *Packetbeat* - Fix http status phrase parsing not allow spaces. {pull}5312[5312] +- Fix missing length check in the PostgreSQL module. {pull}5457[5457] *Winlogbeat*
packetbeat/protos/pgsql/parse.go+3 −0 modified@@ -377,6 +377,9 @@ func pgsqlFieldsParser(s *pgsqlStream, buf []byte) error { off += 4 // read format (int16) + if len(buf) < off+2 { + return errFieldBufferShort + } format := common.BytesNtohs(buf[off : off+2]) off += 2 fieldsFormat = append(fieldsFormat, byte(format))
Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
8- discuss.elastic.co/t/beats-5-6-4-security-update/106739nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-9q3g-m353-cp4pghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-11480ghsaADVISORY
- github.com/elastic/beats/commit/aeca65779d573976981587ca1d1461399e1b59ddghsaWEB
- github.com/elastic/beats/pull/5457ghsaWEB
- github.com/elastic/beats/pull/5479ghsaWEB
- github.com/elastic/beats/pull/5480ghsaWEB
- pkg.go.dev/vuln/GO-2022-0643ghsaWEB
News mentions
0No linked articles in our index yet.