OSV-2020-2135 Heap-buffer-overflow in _flb_strptime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27241 Crash type: Heap-buffer-overflow READ 1 Crash state: flbstrptime flbstrptime strpfuzzer.c...

fluent-bit:flb-it-fuzz-strp_fuzzer_OSSFUZZ: Heap-buffer-overflow in _flb_strptime

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5663333098979328 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-strpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ...

WS-2020-0356

fluent-bit in versions 1.1.0 to 1.6.10 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbstrptime.c...