Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-50608)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50608 advisory. - An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running an...

CVE-2024-50608 affecting package fluent-bit for versions less than 3.1.9-3

CVE-2024-50608 affecting package fluent-bit for versions less than 3.1.9-3. A patched version of the package is available...

CVE-2024-50608 affecting package fluent-bit for versions less than 3.0.6-2

CVE-2024-50608 affecting package fluent-bit for versions less than 3.0.6-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-50608)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50608 advisory. - An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running an...

Fluent Bit Multiple Vulnerabilities

The version of Fluent Bit running on the remote host is prior to 3.2.7. It is, therefore, is affected by multiple vulnerabilities: - An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet...

CVE-2024-50608

creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihul7nvgj2g 2025-02-18 20:59:53+00:00| seen| https://t.me/cvedetector/18355 2025-02-18 21:56:19+00:00| seen|...

CVE-2024-50608

Fluent Bit 3.1.9 is affected by CVE-2024-50608 (Prometheus Remote Write input) and CVE-2024-50609 (OpenTelemetry input). In both cases, sending a crafted HTTP request with Content-Length: 0 triggers a NULL pointer dereference in the server (via cfl_sds_len) and can cause remote DoS. Connected adv...

CVE-2024-50608

An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user with access t...