CVE-2025-68381

Medium · 6.5

CVSS

6.5

EPSS

0.5%

Published

Dec 18, 2025

CISA due date

—

The record

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.

Affected packages

Ecosystem	Package	Introduced	Fixed