VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Dec 18, 2025· Updated Jun 17, 2026

CVE-2025-68381

CVE-2025-68381

Description

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Elastic/BeatsOSV
    Range: v9.2.0, v9.2.1, v9.2.2
  • Elastic/Packetbeat2 versions
    cpe:2.3:a:elasticsearch:packetbeat:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:elasticsearch:packetbeat:*:*:*:*:*:*:*:*range: >=7.0.0,<=7.17.29
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.