We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f86a478 commit b4a58fbCopy full SHA for b4a58fb
docs/reference/release-notes/7.13.asciidoc
@@ -3,6 +3,19 @@
3
4
Also see <<breaking-changes-7.13,Breaking changes in 7.13>>.
5
6
+[discrete]
7
+[[security-updates-7.13.3]]
8
+=== Security updates
9
+
10
+* An uncontrolled recursion vulnerability that could lead to a
11
+denial of service attack was identified in the {es} Grok parser.
12
+A user with the ability to submit arbitrary queries to {es} could create
13
+a malicious Grok query that will crash the {es} node.
14
+All versions of {es} prior to 7.13.3 are affected by this flaw.
15
+You must upgrade to {es} version 7.13.3 to obtain the fix.
16
+https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22144[CVE-2021-22144]
17
18
19
[[bug-7.13.3]]
20
[float]
21
=== Bug fixes
0 commit comments