Splunk Enterprise Data Processing Vulnerability

Last Update Date: 20 Dec 2013 10:09 Release Date: 20 Dec 2013 3062 Views

RISK: Medium Risk

TYPE: Servers - Network Management

A vulnerability has been identified in Splunk Enterprise. A remote user can cause denial of service conditions.

A remote user can send specially crafted data to cause the target server to become unavailable.

Systems configured as data 'receivers' on the listening or receiving port(s) are affected, including instances configured as indexers and forwarders configured as intermediate forwarders.

Impact

Denial of Service

System / Technologies affected

Version 6.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (6.0.1).

Vulnerability Identifier

No CVE information is available

Source

SecurityTracker