CVE-2024-4323
Fluent Bit Memory Corruption Vulnerability
Résumé
Fluent Bit Memory Corruption Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
Paquets affectés
Bitnami
fluent-bit
[{"type":"SEMVER","events":[{"introduced":"2.0.7"},{"fixed":"3.0.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web tenable.com
- web vicarius.io
- web fluentbit.io
- web fluentbit.io