fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Crash in consume_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5062715641036800 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000017691000 Crash State: consumebytes...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6459399624327168 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

Fluent Bit Code Issue Vulnerability

Fluent Bit is an open source log processing and analysis system written in C. A code issue vulnerability exists in Fluent Bit that arises from improper design or implementation during code development of a networked system or product. No detailed vulnerability details are provided at this time...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash in flb_utils_proxy_url_split

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6472247925669888 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

Null pointer dereference

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2021-27186

Fluent Bit 1.6.10 is affected by CVE-2021-27186 due to a NULL pointer dereference caused by an unvalidated flb_malloc return in flb_avro.c or in the HTTP server endpoint at http_server/api/v1/metrics.c. This vulnerability can lead to a crash; exploitation details or active exploit status are not ...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

PT-2021-17305 · Unknown · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit version 1.6.10 Description: The issue is related to a NULL pointer dereference that occurs when the return value of flb malloc is not validated by flb avro.c or http server/api/v1/metrics.c. This can lead to a crash or potentially...

CVE-2021-27186: NULL Pointer Dereference

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

Fluent Bit 代码问题漏洞

Fluent Bit is an open source log processing and analysis system written in C. A code issue vulnerability exists in Fluent Bit that arises from improper design or implementation during code development of a networked system or product. No detailed vulnerability details are provided at this time...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4722530172665856 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fff3 Crash State: NULL Sanitizer:...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4585689394053120 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_parser_json_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6094172639592448 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

WS-2021-0148

Fluent Bit is vulnerable to Stack-buffer-overflow , related tosrc/flbrecordaccessor.c...

WS-2021-0124

Fluent Bit before v1.7.5 is vulnerable to heap-buffer-overflow in flbparserjsondo, related to src/flbparserjson.c...

Fluent Bit Buffer Overflow Vulnerability

Fluent Bit is an open source log processing and analysis system written in C. A buffer overflow vulnerability exists in Fluent Bit version 1.6.4, which stems from the fact that flbgzipcompress in flbgzip.c has an out-of-bounds write operation because it fails to use the correct calculation of the...