AZL-76466 CVE-2025-63653 affecting package fluent-bit 3.0.6-6

An out-of-bounds read in the mkvhostfdtclose function mkserver/mkvhost.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

AZL-76460 CVE-2025-63652 affecting package fluent-bit 3.0.6-6

A use-after-free in the mkhttprequestend function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

AZL-76539 CVE-2025-63652 affecting package fluent-bit for versions less than 3.1.10-6

A use-after-free in the mkhttprequestend function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

AZL-76457 CVE-2025-63651 affecting package fluent-bit 3.0.6-6

A use-after-free in the mkstringcharsearch function mkcore/mkstring.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

AZL-76383 CVE-2025-63650 affecting package fluent-bit 3.0.6-6

An out-of-bounds read in the mkptrtobuf in mkcore function mkmemory.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

Azure Linux 3.0 Security Update: fluent-bit (CVE-2025-31498)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-31498 advisory. - c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in...

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...

GHSA-JW54-C8RR-PJPQ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, newrelic-fluent-bit-output...

CVE-2025-0913 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, newrelic-fluent-bit-output...

CVE-2025-0913 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.8, go, nvidia-nsight-compute-12.9, newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, kubeflow-katib...

GHSA-JW54-C8RR-PJPQ vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.8, go, nvidia-nsight-compute-12.9, newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, kubeflow-katib...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Heap-buffer-overflow in cmt_mpack_consume_uint_tag

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6087528567603200 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Joining already joined thread, aborting. in flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ

Detailed Report: https://oss-fuzz.com/testcase?key=5048089934364672 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Joining already joined thread, aborting. Crash Address: Crash State...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3

CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3

CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-3. A patched version of the package is available...

BIT-FLUENT-BIT-2025-29478

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfllistsize in cfllist.h:165...

BIT-FLUENT-BIT-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

The vulnerability of the tag_key validation mechanism in the Fluent Bit log collection and processing tool allows a perpetrator to influence the integrity and accessibility of the protected information.

The vulnerability of the tagkey validation mechanism in the Fluent Bit log collection and processing tool is related to insufficient checking of input data. Exploiting this vulnerability allows an attacker to influence the integrity and accessibility of protected information through a specially...

AZL-71854 CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

The vulnerability of the in_forward plugin of the Fluent Bit log collection and processing tool allows a hacker to bypass existing security restrictions and gain access to the system.

The vulnerability of the inforward plugin for logging and processing in Fluent Bit is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and gain access to the system...