422 matches found
CBL Mariner 2.0 Security Update: fluent-bit / hvloader (CVE-2021-36647)
The version of fluent-bit / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-36647 advisory. - Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c...
CBL Mariner 2.0 Security Update: fluent-bit (CVE-2022-46392)
The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46392 advisory. - An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to...
CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1
CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2020-35963
flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...
AZL-13023 CVE-2021-36647 affecting package fluent-bit for versions less than 2.0.9-1
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...
AZL-12968 CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses typically, an untrusted operating system attacking a secure enclave can recover an RSA private key after observing the victim performing a single...
PT-2022-36767 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as output thread, step callback, and flb task...
PT-2022-36737 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash type of Heap-buffer-overflow READ 8, with a crash state...
PT-2022-37277 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by a crash report. The crash involves the flb env var translate and flb parser conf...
PT-2022-37269 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash occurs in the flb sds destroy function, which is called by flb parser conf file in the config...
Fluent Bit Resource Management Error Vulnerability
Fluent Bit is an open source log processing and analysis system written in C. A security vulnerability exists in Fluent Bit versions 1.7.0 through 1.7.4, which stems from a dobule-free in "flb free".No details of the vulnerability are available at this time...
CVE-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
CVE-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
CVE-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
Double free
Fluent Bit aka fluent-bit 1.7.0 through 1.7,4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
CVE-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
CVE-2021-36088
Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...
CVE-2021-36088
CVE-2021-36088 affects Fluent Bit (fluent-bit) versions 1.7.0–1.7.4. The root cause is a double free in flb_free (called from flb_parser_json_do and flb_parser_do ). CVSS data in connected sources indicate a high/critical impact with network access and no authentication required, affecting confid...
PT-2021-21109 · Unknown · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: Fluent Bit aka fluent-bit versions 1.7.0 through 1.7.4 Description: The issue is related to a double free in the flb free function, which is called from flb parser json do and flb parser do. Recommendations: For Fluent Bit aka fluent-bit...
