369 matches found
CVE-2025-12970
The CVE-2025-12970 detail describes a vulnerability in Fluent Bit: the extract_name function in the in_docker input plugin copies container names into a fixed-size stack buffer without validating length, allowing an attacker who can create or name containers to supply a long name that overflows t...
CVE-2025-12970 CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analysis system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from not cleaning up tagkey input, which could lead to newline injection, path traversal, or log misrouting...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from a failure to properly implement the security.users authentication mechanism, which could lead to a remote attacker sending...
PT-2025-47921
Name of the Vulnerable Software and Affected Versions Fluent Bit versions affected versions not specified Description The extract name function within the in docker input plugin of Fluent Bit contains a buffer overflow issue. This occurs because the function copies container names into a fixed-si...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analysis system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from not properly cleaning up tagged values, which could lead to a path traversal attack that allows files to be written to unintended...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from an unvalidated container name length, which could result in a buffer overflow that could trigger a process crash or execution of...
Fluent Bit contains five vulnerabilities, including stack buffer overflow, auth bypass, and path traversal
Overview Fluent Bit is a logging and metrics processor and forwarder that is used in a variety of cloud and container networking environments. Several vulnerabilities in Fluent Bit have been discovered that could allow for authentication bypass, remote code execution RCE and denial of service DoS...
PT-2025-47922
Name of the Vulnerable Software and Affected Versions Fluent Bit versions prior to 4.1.1 Description The out file plugin in Fluent Bit does not properly sanitize tag values when creating output file names. If the File option is not specified, the plugin utilizes tag input, which is considered...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from a flaw in the tagkey validation logic, which could cause logs to redirect to an unintended destination...
PT-2025-47920
Name of the Vulnerable Software and Affected Versions Fluent Bit affected versions not specified Description The Fluent Bit in forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with netwo...
CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6
CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6. A patched version of the package is available...
CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4
CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4. A patched version of the package is available...
EUVD-2021-13952
Malware in sbrugna...
EUVD-2019-19112
Malware in sbrugna...
EUVD-2021-22721
Malware in sbrugna...
EUVD-2020-23546
Malware in sbrugna...
EUVD-2025-9768
Malicious code in bioql PyPI...