cve/2016/CVE-2016-10363.md

### [CVE-2016-10363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10363)
![](https://img.shields.io/static/v1?label=Product&message=Logstash&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-248%3A%20Uncaught%20Exception&color=brighgreen)

### Description

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.

### POC

#### Reference
- https://www.elastic.co/community/security

#### Github
No PoCs found on GitHub currently.