Description (CNA)
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fluent Bit / Fluent Bit | affected 2.0.7 through 3.0.3 |
CWE
CWE-122
References
- https://tenable.com/security/research/tra-2024-17
- https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.