Elastic Docker Image CVE Overview

elasticsearch - CVE-2024-30172

Detailed information about this CVE

Severity

MEDIUM

Description

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

CVSS Scores

RedHat: V3: 7.5

Affected Versions

8.14.3
8.14.2
8.14.1
8.14.0
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.2
8.12.1
8.12.0

Not Affected Versions

9.4.0
9.3.4
9.3.3
9.3.2
9.3.1
9.3.0
9.2.8
9.2.7
9.2.6
9.2.5
9.2.4
9.2.3
9.2.2
9.2.1
9.2.0
9.1.10
9.1.9
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.8
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.19.15
8.19.14
8.19.13
8.19.12
8.19.11
8.19.10
8.19.9
8.19.8
8.19.7
8.19.6
8.19.5
8.19.4
8.19.3
8.19.2
8.19.1
8.19.0
8.18.8
8.18.7
8.18.6
8.18.5
8.18.4
8.18.3
8.18.2
8.18.1
8.18.0
8.17.10
8.17.9
8.17.8
8.17.7
8.17.6
8.17.5
8.17.4
8.17.3
8.17.2
8.17.1
8.17.0
8.16.6
8.16.5
8.16.4
8.16.3
8.16.2
8.16.1
8.16.0
8.15.5
8.15.4
8.15.3
8.15.2
8.15.1
8.15.0
8.11.4
8.11.3
8.11.2
8.11.1
8.11.0
8.10.4
8.10.3
8.10.2
8.10.1
8.10.0
8.9.2
8.9.1
8.9.0
8.8.2
8.8.1
8.8.0
8.7.1
8.7.0
8.6.2
8.6.1
8.6.0
8.5.3
8.5.2
8.5.1
8.5.0
8.4.3
8.4.2
8.4.1
8.4.0
8.3.3
8.3.2
8.3.1
8.3.0
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.2
8.1.1
8.1.0
8.0.1
8.0.0