CVE-2024-34250 affecting package fluent-bit for versions less than 3.0.6-1

CVE-2024-34250 affecting package fluent-bit for versions less than 3.0.6-1. A patched version of the package is available...

CVE-2024-25629 affecting package fluent-bit for versions less than 3.0.6-1

CVE-2024-25629 affecting package fluent-bit for versions less than 3.0.6-1. A patched version of the package is available...

[SECURITY] Fedora 39 Update: fluent-bit-3.0.4-1.fc39

Fluent Bit is a high performance and multi-platform log forwarder...

[SECURITY] Fedora 40 Update: fluent-bit-3.0.4-1.fc40

Fluent Bit is a high performance and multi-platform log forwarder...

Fedora 39 : fluent-bit (2024-f3c8d05888)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f3c8d05888 advisory. Update to 3.0.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : fluent-bit (2024-07db6333b0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-07db6333b0 advisory. Update to 3.0.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-34250)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34250 advisory. - A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which...

CBL Mariner 2.0 Security Update: c-ares / fluent-bit / grpc / nodejs (CVE-2023-31130)

The version of c-ares / fluent-bit / grpc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-31130 advisory. - c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a...

CBL Mariner 2.0 Security Update: c-ares / fluent-bit / grpc / nodejs (CVE-2023-32067)

The version of c-ares / fluent-bit / grpc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32067 advisory. - c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-26455)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26455 advisory. - fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-4323)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4323 advisory. - A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedde...

CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1

CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: up, policy-controller, rclone, cortex, flux-image-reflector-controller, tekton-chains, spire-server, buildkitd, flux-source-controller, nuclei, opentelemetry-collector, guac, hugo, k8sgpt, kubescape, fluent-bit-plugin-loki, harbor-registry, druid,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: spire-server-fips, newrelic-prometheus-configurator, scorecard, s5cmd, rabbitmq-default-user-credential-updater, go-licenses, dockerize, speedtest-go, regclient, nvidia-container-toolkit, gitness, kots, multus-cni-fips, nri-kafka, trust-manager-fips, flyte, sops, cto...

CVE-2024-26455 affecting package fluent-bit for versions less than 3.0.3-1

CVE-2024-26455 affecting package fluent-bit for versions less than 3.0.3-1. An upgraded version of the package is available that resolves this issue...

BIT-FLUENT-BIT-2024-23722

In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly...

CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1

CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...

CVE-2024-34250 affecting package fluent-bit for versions less than 2.2.3-1

CVE-2024-34250 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...

CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1

CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1. A patched version of the package is available...

BIT-FLUENT-BIT-2024-4323 Fluent Bit Memory Corruption Vulnerability

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution...