Improper handling of exceptional conditions in OpenSearch

1) Improper handling of exceptional conditions

EUVDB-ID: #VU101751

Risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-41917

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect error handling in the REST API. A remote user can trick the victim into opening a specially crafted input to exploit this vulnerability to read partial file information, and use this information to launch further attacks against the affected system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

OpenSearch: before 1.3.7

CPE2.3

• cpe:2.3:a:opensearch:opensearch:*:*:*:*:*:*:*:*

External links

https://github.com/opensearch-project/OpenSearch/security/advisories/GHSA-w3rx-m34v-wrqx
https://github.com/opensearch-project/OpenSearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.