573 matches found
WS-2020-0318
Fluent Bit in versions v0.14.0 to v1.4.3 is vulnerable to heap-buffer-overflow in flbunescapestringutf8...
fluent-bit:parse_logfmt_fuzzer: Heap-buffer-overflow in logfmt_parser
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5659446845112320 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: parselogfmtfuzzer Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
WS-2020-0295
Fluent Bit v.1.4.3 is vulnerable to buffer overflow in logfmtparser...
Making Container Deployment and Analysis Self-Service for Development
Team Riptide was tasked with creating an environment for our developers that removes operational burdens. We wanted to provide them with infrastructure, best practices, automation, and self-service tooling so that they could focus on innovation. The result is an internal system we call “Mosaic,”...
Design/Logic Flaw
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...
CVE-2019-9749
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...
CVE-2019-9749
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...
CVE-2019-9749
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...
CVE-2019-9749
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...
CVE-2019-9749
The CVE-2019-9749 entry pertains to Fluent Bit’s MQTT input plugin (up to version 1.0.4) when acting as an MQTT broker. The root cause is in mqtt_packet_drop (plugins/in_mqtt/mqtt_prot.c): after processing a crafted packet, memmove() is invoked with a negative size, causing a crash of the Fluent ...
PT-2019-19841
Name of the Vulnerable Software and Affected Versions Fluent Bit versions through 1.0.4 Description An issue in the MQTT input plugin, when acting as an MQTT broker, mishandles incoming network messages. After processing a crafted packet, the mqtt packet drop function executes the memmove functio...
CVE-2019-9749: Incorrect Conversion between Numeric Types
An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker server, it mishandles incoming network messages. After processing a crafted packet, the plugin's mqttpacketdrop function in /plugins/inmqtt/mqttprot.c executes the memmove functio...