CVE-2025-29477

A local vulnerability exists in fluent-bit v.3.7.2 where an attacker can trigger a denial of service (DoS) via the consume_event function. This issue is classified as uncontrolled resource consumption (CWE-400). While the vulnerability is confirmed to be exploitable locally, specific details rega...

CVE-2025-29478

A local vulnerability exists in fluent-bit v.3.7.2 that allows a local attacker to trigger a denial of service (DoS). The root cause is related to the cfl_list_size in cfl_list.h:165, which falls under CWE-400 (Uncontrolled Resource Consumption). While the Red Hat security bulletin mentions a pot...