CVE-2021-22144: elastic elasticsearch Uncontrolled Recursion
Vulnerability summary
CVE-2021-22144 is a medium (CVSS 6.5) Uncontrolled Recursion vulnerability in elastic elasticsearch. EPSS estimates a 2.44% chance of exploitation in the next 30 days, higher than 84% of scored vulnerabilities.
Timeline
- 26-07-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · MavenEcosystem advisory · calculated5.7MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
2.44%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
+0.26 pp
From 2.18% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Elastic1 product
- elasticsearch< 6.8.17 | ≥ 7.0.0, < 7.13.3
Oracle1 product
Org.elasticsearch1 product
- elasticsearch< 6.8.17 | ≥ 7.0.0-alpha1, < 7.13.3
Ubuntu1 product
- elasticsearchAll versions (No fix recorded)
4 vendors · 4 products
References
7 links- discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100X Refsource MISCWEBRelease NotesVendor Advisory
