CVE-2024-23722-poc

CVE-2024-23722-poc 사용법 python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open Server might have...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 우리는 테러 단체 하마스에 의해 인질로 잡힌 모든 시민의 안전한 귀환을 요구합니다. 모든 인질이 석방되어 안전하게 집으로 돌아올 때까지 우리는 쉬지 않을 것입니다. 여러분이 그들을 집으로 데려오는 데 도움을 줄 수 있습니다.https://stories.bringthemhomenow.net/ CVE-2024-4323 개요 Fluent Bit의 HTTP 서버 구현에 있는 handletracerequest 및 parsetracerequest 함수가 심각한 취약점인...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-익스플로잇-POC 이 개념 증명 스크립트는 Fluent Bit의 메모리 손상 취약점인 CVE-2024-4323을 악용하여 원격 코드 실행을 가능하게 하는 방법을 보여줍니다. CVE-2024-4323은 Fluent Bit 버전 2.0.7부터 3.0.3까지의 메모리 손상 취약점입니다. 이 문제는 내장 HTTP 서버의 trace 요청 파싱에 있으며, 서비스 거부DoS, 정보 노출 또는 원격 코드 실행RCE로 이어질 수 있습니다 MITRE CVE Launchpad. 취약점 및 완화 조치에 대한 자세한 내용은...

BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

AZL-105060 CVE-2026-61674 affecting package fluent-bit 3.1.10-7

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

EUVD-2026-83985

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674

Fluent Bit (versions 0.11.0 through 5.0.8) contains a remote stack buffer overflow in the out_forward Secure-Forward PONG handler (plugins/out_forward/forward.c, function secure_forward_pong). The server-controlled PONG[2] reason field is copied via memcpy into a fixed 32-byte stack buffer withou...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674: Stack-based Buffer Overflow

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

PT-2026-96148

Name of the Vulnerable Software and Affected Versions Fluent Bit versions 0.11.0 through 5.0.7 Description A stack buffer overflow exists in the secure forward pong function within plugins/out forward/forward.c. The issue occurs when the software copies a server-controlled PONG reason into a...

AZL-103454 CVE-2026-69186 affecting package fluent-bit 3.1.10-7

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

AZL-103457 CVE-2026-69184 affecting package fluent-bit 3.1.10-7

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

CVE-2026-33630 affecting package fluent-bit for versions less than 3.1.10-7

CVE-2026-33630 affecting package fluent-bit for versions less than 3.1.10-7. A patched version of the package is available...

AZL-97458 CVE-2026-72854 affecting package fluent-bit 3.1.10-7

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, nvidia-nsight-compute-12.9, newrelic-fluent-bit-output, go, nvidia-nsight-compute-13.1...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: cloudzero-agent-fips, karma, fluent-bit-plugin-loki, prometheus-operator, trillian-fips, ld-relay-fips, opentelemetry-collector, prometheus-pushgateway, agentbeat-fips, tempo-fips, loki-fips, cloud-sql-proxy-fips, splunk-otel-collector-fips, karma-fips, minio,...