Threats tagged 'ghsa-m495-gxx4-gw2p'

A NULL Pointer Dereference vulnerability (CWE-476) exists in the AMQP protocol parser of Packetbeat. This flaw allows an unauthenticated attacker to cause a denial of service by sending specially crafted AMQP network traffic that triggers a Go runtime panic, terminating the Packetbeat process. Exploitation requires network access to the monitored segment but no AMQP authentication. Packetbeat does not collect telemetry when not running.