Exploit for Out-of-bounds Write in Treasuredata Fluent_Bit

🗓️ 21 May 2024 12:59:16Reported by d0rbType

Fluent Bit HTTP server hndle_trace_request and parse_trace_request functions contain vulnerability CVE-2024-4323,affecting buffer allocation and input validation, allowing heap buffer overflow and potential RCE. Mitigation involves adding bounds checking and input validation.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for Out-of-bounds Write in Treasuredata Fluent_Bit	20 May 202415:04	–	githubexploit
Tenable Nessus	Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-4323)	10 Feb 202500:00	–	nessus
Tenable Nessus	Fluent Bit Heap-based Buffer Overflow	21 May 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-4323)	3 Jul 202400:00	–	nessus
BDU FSTEC	The vulnerability in the built-in HTTP server of the Fluent Bit logging and processing tool allows a perpetrator to execute arbitrary code.	22 May 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2024-4323 affecting package fluent-bit for versions less than 2.2.3-1	29 May 202400:21	–	cbl_mariner
Chainguard	CVE-2024-4323 vulnerabilities	20 May 202412:15	–	cgr
Circl	CVE-2024-4323	20 May 202415:08	–	circl
CNNVD	Fluent Bit 安全漏洞	20 May 202400:00	–	cnnvd