369 matches found
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analyzing system written in C. A security vulnerability exists in Fluent Bit versions 2.1.8 through 2.2.1 that stems from a null pointer dereference vulnerability that allows an attacker to construct an invalid HTTP with a content type of...
CVE-2024-23722
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly...
CVE-2024-23722
Fluent Bit 2.1.8–2.2.1 is vulnerable to a NULL pointer dereference triggered by an invalid HTTP payload with content-type x-www-form-urlencoded, causing a crash and log delivery disruption. Affected versions and impact are stated in multiple sources; remediation is to upgrade Fluent Bit to a vers...
CVE-2024-23722
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly...
PT-2024-20035 · Unknown +2 · Fluent-Bit +2
Name of the Vulnerable Software and Affected Versions: Fluent Bit versions 2.1.8 through 2.2.1 Description: A NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded, resulting in a crash and failure to restart. This could lead to logs not...
BIT-FLUENT-BIT-2020-35963
flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...
BIT-FLUENT-BIT-2021-27186
Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...
BIT-FLUENT-BIT-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
BIT-FLUENT-BIT-2021-46878
An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.
...
AZL-35472 CVE-2024-26455 affecting package fluent-bit for versions less than 3.0.3-1
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...
AZL-35449 CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...
CVE-2024-26455
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...
Design/Logic Flaw
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...
Fluent Bit Security Vulnerability
Fluent Bit is an open source log processing and analyzing system written in C. A security vulnerability exists in Fluent Bit version 2.2.2, which stems from a post-release reuse vulnerability in the /fluent-bit/plugins/customcalyptia/calyptia.c file...
CVE-2024-26455
Converging evidence from multiple sources confirms CVE-2024-26455 affects fluent-bit 2.2.2, with a Use-After-Free in /fluent-bit/plugins/custom_calyptia/calyptia.c. The underlying issue is a post-release Use-After-Free vulnerability in that file, leading to an impact on availability (CVSS v3.1: H...
PT-2024-21382 · Unknown · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: fluent-bit version 2.2.2 Description: The issue is a Use-After-Free vulnerability located in the /fluent-bit/plugins/custom calyptia/calyptia.c file. Recommendations: For fluent-bit version 2.2.2, consider disabling the custom calyptia plugin...
CVE-2024-26455
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...