#VU101751 Improper handling of exceptional conditions in OpenSearch - CVE-2022-41917

Vulnerability identifier: #VU101751

Vulnerability risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-41917

CWE-ID: CWE-755

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
OpenSearch
Other software / Other software solutions

Vendor: OpenSearch

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect error handling in the REST API. A remote user can trick the victim into opening a specially crafted input to exploit this vulnerability to read partial file information, and use this information to launch further attacks against the affected system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

OpenSearch: before 1.3.7

---

External links
https://github.com/opensearch-project/OpenSearch/security/advisories/GHSA-w3rx-m34v-wrqx
https://github.com/opensearch-project/OpenSearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.