369 matches found
AZL-76460 CVE-2025-63652 affecting package fluent-bit 3.0.6-6
A use-after-free in the mkhttprequestend function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76358 CVE-2025-63655 affecting package fluent-bit 3.1.10-4
A NULL pointer dereference in the mkhttprangeparse function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76380 CVE-2025-63655 affecting package fluent-bit 3.0.6-6
A NULL pointer dereference in the mkhttprangeparse function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76536 CVE-2025-63651 affecting package fluent-bit 3.1.10-4
A use-after-free in the mkstringcharsearch function mkcore/mkstring.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76466 CVE-2025-63653 affecting package fluent-bit 3.0.6-6
An out-of-bounds read in the mkvhostfdtclose function mkserver/mkvhost.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76533 CVE-2025-63653 affecting package fluent-bit 3.1.10-4
An out-of-bounds read in the mkvhostfdtclose function mkserver/mkvhost.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76539 CVE-2025-63652 affecting package fluent-bit 3.1.10-4
A use-after-free in the mkhttprequestend function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
AZL-76355 CVE-2025-63650 affecting package fluent-bit 3.1.10-4
An out-of-bounds read in the mkptrtobuf in mkcore function mkmemory.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
Azure Linux 3.0 Security Update: fluent-bit (CVE-2025-31498)
The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-31498 advisory. - c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in...
CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4
CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...
CVE-2025-0913 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, go, kubeflow-katib...
GHSA-JW54-C8RR-PJPQ vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, go, kubeflow-katib...
GHSA-JW54-C8RR-PJPQ vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, go, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, kubeflow-katib...
CVE-2025-0913 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, go, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, kubeflow-katib...
CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3
CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...
CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3
CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...
BIT-FLUENT-BIT-2025-29478
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfllistsize in cfllist.h:165...
BIT-FLUENT-BIT-2025-29477
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...
AZL-71854 CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...