How severe is CVE-2025-68388?

CVE-2025-68388 has a CVSS v3 score of 5.3 (MEDIUM).

CVE-2025-68388

Name: packetbeat
Author: elasticsearch

5.3MEDIUM

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IP

Published: 12/18/2025Updated: 12/23/2025

Description

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.

AI AnalysisPowered by AI

Affected Products

elasticsearchpacketbeat

References

https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177
Vendor Advisory