Back to CVE Browser

CVE-2015-5377

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0050%

EPSS Percentile14.78th

PublishedMar 6, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

Affected Platforms (CPE)

📦

Elastic

Elasticsearch

< 1.6.1

References & Advisories

🔗 http://www.securityfocus.com/bid/75938

🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-365/

🔗 https://discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736

🔗 https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2

🔗 http://www.securityfocus.com/bid/75938

🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-365/

🔗 https://discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736

🔗 https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2

Related Vulnerabilities

CVE-2017-126299.8

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of ...

CVE-2015-14279.8

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox pro...

CVE-2020-150979.1

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server ...

CVE-2020-70098.8

Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able t...