Every CVE Search/ Get API key

OSV-2022-878

Heap-double-free in flb_sds_destroy

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51132

Crash type: Heap-double-free
Crash state:
flb_sds_destroy
flb_parser_conf_file
config_random_fuzzer.c

What each source reports

OSV No score

Heap-double-free in flb_sds_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51132

Crash type: Heap-double-free
Crash state:
flb_sds_destroy
flb_parser_conf_file
config_random_fuzzer.c
Record
OSV-2022-878
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
fluent-bit
OSS-Fuzz
Listed versions, plus commit ranges
ci-release-testunstableunstable-masterv1.9.0v1.9.0-ci-test-1
Show 14 moreShow less
v1.9.0-rc1v1.9.0-rc2v1.9.0-rc3v1.9.0-rc4v1.9.1v1.9.2v1.9.3v1.9.4v1.9.5v1.9.6v1.9.7v1.9.8v1.9.10v1.9.9
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-878 is a vulnerability with no CVSS score yet in fluent-bit, published September 10, 2022. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open