A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).
Last checked: 2026-09-29 17:30 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-22 16:06 UTC)
Fix evidence last checked: 2026-09-29 17:20 UTC