369 matches found
CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-4323)
The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4323 advisory. - A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedde...
CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1
CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: hugo, buildkitd, wal-g, secrets-store-csi-driver-provider-azure, zot, restic, ksops, zarf, py3-cassandra-medusa, k8sgpt, pulumi, druid, harbor-registry, hugo-extended, flux-source-controller, grafana-agent-operator, velero, flux-image-reflector-controller, nuclei,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: kubernetes-ingress-defaultbackend, spegel, velero-plugin-for-csi, k8s-device-plugin, capslock, chainctl, nri-rabbitmq, trivy, fluent-operator, metrics-server-fips, temporal-ui-server-fips, vt-cli, kustomize, ferretdb, newrelic-fluent-bit-output, ksops,...
CVE-2024-26455 affecting package fluent-bit for versions less than 3.0.3-1
CVE-2024-26455 affecting package fluent-bit for versions less than 3.0.3-1. An upgraded version of the package is available that resolves this issue...
BIT-FLUENT-BIT-2024-23722
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly...
CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1
CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...
CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1
CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...
CVE-2024-34250 affecting package fluent-bit for versions less than 2.2.3-1
CVE-2024-34250 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...
BIT-FLUENT-BIT-2024-4323 Fluent Bit Memory Corruption Vulnerability
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution...
Fluent Bit Memory Corruption Vulnerability
...
Critical ‘Linguistic Lumberjack’ Flaw in Fluent Bit Hits Major Cloud Providers
...
The vulnerability in the built-in HTTP server of the Fluent Bit logging and processing tool allows a perpetrator to execute arbitrary code.
The vulnerability of the built-in HTTP server tool for logging and processing logs in Fluent Bit is related to the possibility of buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for Out-of-bounds Write in Treasuredata Fluent_Bit
!Profile Visitorshttps://komarev.com/ghpvc/?username=d0rb&la...
"Linguistic Lumberjack" Vulnerability Discovered in Popular Logging Utility Fluent Bit
Cybersecurity researchers have discovered a critical security flaw in a popular logging and metrics utility called Fluent Bit that could be exploited to achieve denial-of-service DoS, information disclosure, or remote code execution. The vulnerability, tracked as CVE-2024-4323, has been codenamed...
Fluent Bit Heap-based Buffer Overflow
The version of Fluent Bit running on the remote host is prior to 3.0.4. It is, therefore, is affected by a heap-based buffer overflow vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Fluent Bit Detection
Binary data fluentbitdetect.nbin...
Exploit for Out-of-bounds Write in Treasuredata Fluent_Bit
CVE-2024-4323-Exploit-POC This proof-of-concept script demons...