CVE-2021-46879

The CVE-2021-46879 issue affects Treasure Data Fluent Bit 1.7.1. A wrong variable is used when reading msgpack data, causing a heap overflow in flb_msgpack_gelf_value_ext. This can be triggered by a crafted file opened with Fluent Bit, potentially allowing arbitrary code execution on the target s...

Fluent Bit 缓冲区错误漏洞

Fluent Bit is an open source log processing and analyzing system written in C. A security vulnerability exists in Treasure Data Fluent Bit version 1.7.1, which stems from the presence of a heap overflow that can be exploited by an attacker to execute arbitrary code on the target system...

CVE-2021-46879

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flbmsgpackgelfvalueext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute...