AZL-76355 CVE-2025-63650 affecting package fluent-bit 3.1.10-4

An out-of-bounds read in the mkptrtobuf in mkcore function mkmemory.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

Azure Linux 3.0 Security Update: fluent-bit (CVE-2025-31498)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-31498 advisory. - c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in...

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...

CVE-2025-0913 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, go...

GHSA-JW54-C8RR-PJPQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, go...

GHSA-JW54-C8RR-PJPQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.9, nvidia-nsight-compute-12.8, go, kubeflow-katib, nvidia-nsight-compute-13.1...

CVE-2025-0913 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.9, nvidia-nsight-compute-12.8, go, kubeflow-katib, nvidia-nsight-compute-13.1...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3

CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3

CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...

BIT-FLUENT-BIT-2025-29478

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfllistsize in cfllist.h:165...

BIT-FLUENT-BIT-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

AZL-71854 CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2

CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2. A patched version of the package is available...

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5. A patched version of the package is available...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

BIT-FLUENT-BIT-2025-12978 CVE-2025-12978

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...

BIT-FLUENT-BIT-2025-12977 CVE-2025-12977

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins fail to sanitize tagkey inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tagkey values containing special characters such as newlines or ../ that are treated as valid tags...

BIT-FLUENT-BIT-2025-12972 CVE-2025-12972

Fluent Bit outfile plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing path traversal sequences that cause...

BIT-FLUENT-BIT-2025-12970 CVE-2025-12970

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...