CVE-2017-8452
16.06.2017, 21:29
Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes.Enginsight
| Vendor | Product | Version |
|---|---|---|
| elastic | kibana | 𝑥 ≤ 5.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-775 - Missing Release of File Descriptor or Handle after Effective LifetimeThe software does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.
- CWE-769 - DEPRECATED: Uncontrolled File Descriptor ConsumptionThis entry has been deprecated because it was a duplicate of CWE-774. All content has been transferred to CWE-774.