Double free

Fluent Bit aka fluent-bit 1.7.0 through 1.7,4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

CVE-2021-36088

Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

CVE-2021-36088

Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

CVE-2021-36088

Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

CVE-2021-36088

CVE-2021-36088 affects Fluent Bit (fluent-bit) versions 1.7.0–1.7.4. The root cause is a double free in flb_free (called from flb_parser_json_do and flb_parser_do ). CVSS data in connected sources indicate a high/critical impact with network access and no authentication required, affecting confid...

CVE-2021-36088

Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

PT-2021-21109 · Unknown · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit aka fluent-bit versions 1.7.0 through 1.7.4 Description: The issue is related to a double free in the flb free function, which is called from flb parser json do and flb parser do. Recommendations: For Fluent Bit aka fluent-bit...

CVE-2021-36088: Double Free

Fluent Bit aka fluent-bit 1.7.0 through 1.7.4 has a double free in flbfree called from flbparserjsondo and flbparserdo...

Fluent Bit 资源管理错误漏洞

Fluent Bit is an open source log processing and analysis system written in C. A security vulnerability exists in Fluent Bit versions 1.7.0 through 1.7.4, which stems from a dobule-free in "flb free".No details of the vulnerability are available at this time...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4724867529310208 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f90e3401220 Crash State: NULL Sanitizer:...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_string_copy_substr

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5573345608335360 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_rconf_read

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5032954534428672 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-use-after-free in multiline_parser_conf_file

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5406843416477696 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free REA...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5261711146876928 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f7e5a48cd40 Crash State: NULL Sanitizer:...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5874775835672576 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6311769406570496 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

WS-2021-0138

Fluent Bit in versions 1.3.0 to 1.7.4 is vulnerable to Stack-buffer-overflow in flbsdscat, related to src/flbrecordaccessor.c...

CVE-2020-35963

flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5216297967288320 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash...

The vulnerability of the flb_gzip_compress() function implementation in the Fluent Bit data collector allows a hacker to trigger a service failure.

The vulnerability of the flbgzipcompress function implementation in Fluent Bit data collectors is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...