Fluent Bit Memory Corruption Vulnerability
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-4323US | critical | — |
02
references
External citations — patches, advisories, analysis.
- https://fluentbit.io/announcements/v3.0.4/WEB
- https://fluentbit.io/blog/2024/05/21/statement-on-cve-2024-4323-and-its-fix/WEB
- https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04FIX
- https://nvd.nist.gov/vuln/detail/CVE-2024-4323WEB
- https://tenable.com/security/research/tra-2024-17ADVISORY
- https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan