WS-2020-0309

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbsdscatutf8 on src/flbsds.c...

WS-2020-0307

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in processchunkeddata on src/flbhttpclient.c...

WS-2020-0326

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbhttpdo, related to src/flbhttpclient.c...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4877025516716032 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Crash in msgpack_sbuffer_write

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5204648860057600 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Heap-use-after-free in flb_pack_msgpack_to_json_format

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5136174263566336 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free RE...

fluent-bit:flb-it-fuzz-signv4_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_signv4_uri_normalize_path

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5125726487183360 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-signv4fuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_parser_json_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5656181661761536 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_gzip_compress

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072671825723392 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

WS-2020-0422

fluent-bit versions v1.3.0 to v1.7.9 are vulnerable to heap overflow resulted by incorrectly calculating the maximum length of compressed output when compressing a log into gzip...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6257779226181632 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in tdefl_compress_lz_codes

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4901088177946624 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

PT-2020-5656 · Fluent Bit · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit versions prior to 1.6.4 Description: The issue is related to the flb gzip compress function in Fluent Bit, which has an out-of-bounds write due to incorrect calculation of the maximum gzip data-size expansion. This could allow a...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_gzip_compress

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4662513180082176 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

fluent-bit:flb-it-fuzz-strp_fuzzer_OSSFUZZ: Heap-buffer-overflow in _flb_strptime

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5663333098979328 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-strpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Crash in flb_sds_cat

Detailed Report: https://oss-fuzz.com/testcase?key=5731415213473792 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffffe Crash State: flbsdscat...

fluent-bit:flb-it-fuzz-config_map_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6208118264168448 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configmapfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Cra...

WS-2020-0356

fluent-bit in versions 1.1.0 to 1.6.10 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbstrptime.c...

fluent-bit:flb-it-fuzz-msgpack_to_gelf_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_msgpack_gelf_value_ext

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5076752961110016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpacktogelffuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_utils_time_to_seconds

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087208312406016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...