CVE-2024-43709: Elastic Elasticsearch

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

Affected products

• Elastic Elasticsearch: from 7.17.0, before 7.17.21 (fixed in 7.17.21); from 8.0.0, before 8.13.3 (fixed in 8.13.3)

Published 2025-01-21. Last modified 2026-06-17.