CVE-2021-46878 affecting package fluent-bit 1.5.2-2

CVE-2021-46878 affecting package fluent-bit 1.5.2-2. A patched version of the package is available...

CVE-2021-46878

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

CVE-2021-46878

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

CVE-2021-46878

Treasure Data Fluent Bit 1.7.1 is affected. The vulnerability stems from an error in flb_pack_msgpack_to_json_format that causes type confusion by interpreting stack data as msgpack maps/arrays, leading to use-after-free. This could allow an attacker to craft a specially crafted file and trigger ...