fluent-bit:flb-it-fuzz-engine_fuzzer_OSSFUZZ: Bad-cast to struct flb_input_instanceengine_fuzzer.c

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4872368874586112 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-enginefuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: Bad-cast Crash Address...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_http_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5706233050955776 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-use-after-free in check_connection

Detailed Report: https://oss-fuzz.com/testcase?key=5647136884654080 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ 6 Crash Address: 0x603000000565 Crash State:...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_rconf_read

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4877570214592512 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-msgpack_to_gelf_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_sds_cat_utf8

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6227554268741632 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpacktogelffuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

WS-2020-0307

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in processchunkeddata on src/flbhttpclient.c...

WS-2020-0309

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbsdscatutf8 on src/flbsds.c...

WS-2020-0326

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbhttpdo, related to src/flbhttpclient.c...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4877025516716032 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Crash in msgpack_sbuffer_write

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5204648860057600 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Heap-use-after-free in flb_pack_msgpack_to_json_format

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5136174263566336 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free RE...

fluent-bit:flb-it-fuzz-signv4_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_signv4_uri_normalize_path

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5125726487183360 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-signv4fuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_parser_json_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5656181661761536 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_gzip_compress

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072671825723392 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

WS-2020-0422

fluent-bit versions v1.3.0 to v1.7.9 are vulnerable to heap overflow resulted by incorrectly calculating the maximum length of compressed output when compressing a log into gzip...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6257779226181632 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in tdefl_compress_lz_codes

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4901088177946624 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

PT-2020-5656 · Fluent Bit · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit versions prior to 1.6.4 Description: The issue is related to the flb gzip compress function in Fluent Bit, which has an out-of-bounds write due to incorrect calculation of the maximum gzip data-size expansion. This could allow a...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_gzip_compress

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4662513180082176 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

fluent-bit:flb-it-fuzz-strp_fuzzer_OSSFUZZ: Heap-buffer-overflow in _flb_strptime

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5663333098979328 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-strpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ...