Every CVE Search/ Get API key

OSV-2022-558

Segv on unknown address in onig_free_body

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48895

Crash type: Segv on unknown address
Crash state:
onig_free_body
onig_new
flb_regex_create

What each source reports

OSV No score

Segv on unknown address in onig_free_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48895

Crash type: Segv on unknown address
Crash state:
onig_free_body
onig_new
flb_regex_create
Record
OSV-2022-558
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
fluent-bit
OSS-Fuzz
Listed versions, plus commit ranges
ci-release-testunstableunstable-masterv1.9.0v1.9.0-ci-test-1
Show 14 moreShow less
v1.9.0-rc1v1.9.0-rc2v1.9.0-rc3v1.9.0-rc4v1.9.1v1.9.2v1.9.3v1.9.4v1.9.5v1.9.6v1.9.7v1.9.8v1.9.9v1.9.10
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-558 is a vulnerability with no CVSS score yet in fluent-bit, published July 10, 2022. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open