PT-2022-36863

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free read crash. The crash occurs in the following functions: cb stdout flush, output pre cb flush, and is trigger...

PT-2022-36860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the msgpack sbuffer write function, which is called by flb pack msgpack to...

PT-2022-36828

Name of the Vulnerable Software and Affected Versions onig versions affected versions not specified Description The issue is related to a crash type of Segv on an unknown address. The crash state involves functions such as onig free body, onig new, and flb regex create. Recommendations At the...

PT-2022-36660

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-double-free crash. The crash occurs in the flb sds destroy function, which is called by flb parser conf file in the config...

PT-2021-27685

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash occurred, as reported by OSS-Fuzz. The crash involves the flb hash get by id function in utils fuzzer.c. No information...

PT-2021-28303

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as mk rconf read, mk rco...

PT-2021-28295

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the multiline parser conf file and flb parser conf file functions, and is relate...

PT-2021-28253

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash state indicates the involvement of functions such as flb free, flb parser json do, and flb...

PT-2021-28251

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include the involvement of flb sds cat and flb ra translate functions, as...

PT-2021-28237

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details about the crash include the functions flb free, flb parser json do, and flb parser do...

PT-2021-27652

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves the flb utils proxy url split function in the utils fuzzer.c file. No...

PT-2021-28038

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash involves the functions flb sds cat, ra translate keymap, and flb ra translate. No...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4722530172665856 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fff3 Crash State: NULL Sanitizer:...

PT-2021-28037

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow READ crash has been identified, involving the flb parser json do and flb parser do functions. The issue is related to a fuzzer...

Fluent Bit 缓冲区错误漏洞

Fluent Bit is an open source log processing and analysis system written in C. A buffer overflow vulnerability exists in Fluent Bit version 1.6.4, which stems from the fact that flbgzipcompress in flbgzip.c has an out-of-bounds write operation because it fails to use the correct calculation of the...

PT-2020-22176

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the tinfl decompress, mz inflate, and flb gzip uncompress functions...

PT-2020-22172

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash was reported. The crash occurred in the flb http do function, as indicated by the crash state. This issue is related t...

PT-2020-22170

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions: flb sds cat utf8, flb...

PT-2020-22163

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as mk rconf read, mk rconf...

PT-2020-22142

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash was identified. The crash involves the flb parser json do and flb parser do functions. Recommendations At the moment, the...