BaseFortify

Publication date: 2025-12-18

Last updated on: 2025-12-23

Assigner: Elastic

Description

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-18

Last Modified

2025-12-23

Generated

2026-07-06

AI Q&A

2025-12-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68382

Affected Vendors & Products

Vendor	Product	Version / Range
elasticsearch	packetbeat	From 7.0.0 (inc) to 7.17.29 (inc)
elasticsearch	packetbeat	From 8.0.0 (inc) to 8.19.9 (exc)
elasticsearch	packetbeat	From 9.0.0 (inc) to 9.1.9 (exc)
elasticsearch	packetbeat	From 9.2.0 (inc) to 9.2.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read (CWE-125) in the NFS protocol dissector that allows an unauthenticated remote attacker to cause a buffer overflow. This happens when the system processes truncated XDR-encoded RPC messages, leading to a denial-of-service (DoS) by crashing a reliable process.

Impact Analysis

The vulnerability can impact you by causing a denial-of-service (DoS) condition. An attacker can remotely crash a reliable process on your system without authentication, potentially disrupting services that rely on the NFS protocol.

Hi! I’m here to help you understand CVE-2025-68382. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70