In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S) or HTTP Event Collector (HEC) protocols to an indexer results in a blockage or denial-of-service preventing further indexing.
2022-11-04T23:15:10.390
2024-11-21T07:26:48.760
Modified
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | splunk | splunk | < 8.1.12 | Yes |
| Application | splunk | splunk | < 8.2.9 | Yes |
| Application | splunk | splunk | < 9.0.2 | Yes |
| Application | splunk | splunk_cloud_platform | < 9.0.2209 | Yes |