fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

🗓️ 02 Nov 2022 18:15:35Reported by GitHub Advisory DatabaseType

Fluentd remote code execution due to insecure deserialization in non-default configuration. Impact: allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads

Reporter	Title	Published	Views	Family All 30
CBLMariner	CVE-2022-39379 affecting package rubygem-fluentd for versions less than 1.14.6-2	16 Nov 202202:26	–	cbl_mariner
CNNVD	Fluentd 代码问题漏洞	2 Nov 202200:00	–	cnnvd
CVE	CVE-2022-39379	2 Nov 202200:00	–	cve
Cvelist	CVE-2022-39379 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)	2 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7331	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 37 Update: golang-github-graylog2-gelf-2.0.0-6.20201111git1550ee6.fc37	11 Jan 202301:22	–	fedora
Fedora	[SECURITY] Fedora 37 Update: golang-github-docker-22.06.0~beta.0-7.fc37	11 Jan 202301:22	–	fedora
Tenable Nessus	Fedora 37 : golang-github-docker / golang-github-graylog2-gelf (2023-6b9e2a6534)	29 Apr 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: rubygem-fluentd (CVE-2022-39379)	20 Mar 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Rubygem PHSA-2025-4.0-0783	23 Apr 202500:00	–	nessus

Vulners

Node

fluentd fluentdRange1.13.2–1.15.3rubygems

Source	Link
github	www.github.com/fluent/fluentd/security/advisories/GHSA-fppq-mj76-fpj2
github	www.github.com/fluent/fluentd/commit/48e5b85dab1b6d4c273090d538fc11b3f2fd8135
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-39379
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/fluentd/CVE-2022-39379.yml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MYD5QV66OLDHES6IKVYYM3Y3YID3VVCO/
github	www.github.com/advisories/GHSA-fppq-mj76-fpj2

27 Jan 2023 05:04Current

9.8High risk

Vulners AI Score9.8

CVSS 3.13.1 - 9.8

EPSS0.44708

SSVC

CWE-502