OSV-2022-1277
Heap-use-after-free in mk_event_timeout_destroy
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089
Crash type: Heap-use-after-free WRITE 8
Crash state:
mk_event_timeout_destroy
flb_sched_destroy
flb_config_exit
What each source reports
OSV No score
Heap-use-after-free in mk_event_timeout_destroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089
Crash type: Heap-use-after-free WRITE 8
Crash state:
mk_event_timeout_destroy
flb_sched_destroy
flb_config_exit
- Record
OSV-2022-1277- Updated
- 2026-11-06
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fluent-bitOSS-Fuzz |
Listed versions, plus commit ranges tiger-2.0.9-dev-20230104v2.0.0v2.0.0-rc1v2.0.0-rc2v2.0.0-rc3 Show 45 moreShow lessv2.0.0prev2.0.1v2.0.10v2.0.11v2.0.12v2.0.13v2.0.14v2.0.2v2.0.3v2.0.4v2.0.5v2.0.6v2.0.7v2.0.8v2.0.9v2.1.0v2.1.0-rc1v2.1.0-rc2v2.1.1v2.1.10v2.1.2v2.1.3v2.1.4v2.1.5v2.1.5-windows-artifact-fixv2.1.6v2.1.7v2.1.8v2.1.9vv.2.0.7v2.2.0v2.2.1v2.2.2v3.0.0v3.0.1v3.0.2v3.0.3v3.0.4v2.2.3v3.0.5v3.0.6v3.0.7v3.1.0v3.1.1v3.1.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2022-1277 is a vulnerability with no CVSS score yet in fluent-bit, published June 26, 2023. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 67 versions. The JSON record has them.