Packetbeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-29)

Packetbeat versions 7.x through 9.2.2 contain a resource allocation vulnerability (CVE-2025-68388) that allows unauthenticated remote attackers to cause denial-of-service through malicious IPv4 fragments. The vulnerability scores 7.5 (High) on CVSS and affects memory and CPU resources without proper limits or throttling. Fixed versions are available: 8.19.9, 9.1.9, and 9.2.3. The issue is classified as CWE-770 (Allocation of Resources Without Limits) and CAPEC-130 (Excessive Allocation).