fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Segv on unknown address in cfl_sds_len

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5627372631293952 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Segv on unknown address in cfl_sds_len

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4733986592325632 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Heap-buffer-overflow in cmt_mpack_consume_uint_tag

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6087528567603200 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Crash in report_error

Detailed Report: https://oss-fuzz.com/testcase?key=6387653342527488 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004efa80 Crash State: reporterro...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Invalid-free in reset_context

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4737967611314176 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Invalid-free Cras...

PT-2023-35948 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions, including reset context and cmt decode...