{"id":"CVE-2024-4323","aliases":["AZL-42103","AZL-42162","BIT-fluent-bit-2024-4323","EUVD-2024-43966","GHSA-68mr-468g-4wmg"],"status":"published","title":"Fluent Bit Memory Corruption Vulnerability","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.27244,"percentile":0.98082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2024-05-20T12:06:21Z","modified":"2026-10-28T10:58:08Z","exploits":[{"source":"pocgithub","id":"d0rb/CVE-2024-4323","title":"d0rb/CVE-2024-4323","date":"2024-05-21","url":"https://github.com/d0rb/CVE-2024-4323"},{"source":"pocgithub","id":"skilfoy/CVE-2024-4323-Exploit-POC","title":"skilfoy/CVE-2024-4323-Exploit-POC","date":"2024-05-20","url":"https://github.com/skilfoy/CVE-2024-4323-Exploit-POC"},{"source":"pocgithub","id":"yuansec/CVE-2024-4323-dos_poc","title":"yuansec/CVE-2024-4323-dos_poc","date":"2024-05-22","url":"https://github.com/yuansec/CVE-2024-4323-dos_poc"}],"fixes":[{"ecosystem":"Azure Linux:3","package":"fluent-bit","fixed_in":["3.0.6-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"fluent-bit","fixed_in":["2.2.3-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"fluent-bit","fixed_in":["3.0.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"fluent-bit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"fluent-bit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"fluent-bit","ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.7"},{"fixed":"3.0.4"}]}]}],"products":[{"vendor":"fluent bit","product":"fluent bit"},{"vendor":"fluentbit","product":"fluent bit"},{"vendor":"treasuredata","product":"fluent_bit"}],"references":[{"url":"https://tenable.com/security/research/tra-2024-17","tags":["x_transferred","Patch","Third Party Advisory","advisory","web"]},{"url":"https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04","tags":["x_transferred","Patch","fix"]},{"url":"https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323","tags":["Exploit","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4323","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-68mr-468g-4wmg"},{"url":"https://fluentbit.io/announcements/v3.0.4/","tags":["web"]},{"url":"https://fluentbit.io/blog/2024/05/21/statement-on-cve-2024-4323-and-its-fix/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/4xxx/CVE-2024-4323.json","tags":["advisory"]},{"url":"https://github.com/fluent/fluent-bit","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-4323","title":"Fluent Bit Memory Corruption Vulnerability","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:06:21.696Z","modified":"2024-08-19T07:47:45.924Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:17.150655Z"}],"euvd":[{"id":"EUVD-2024-43966","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:06:21Z","modified":"2024-08-19T07:47:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:56:16.145705Z"}],"ghsa":[{"id":"GHSA-68mr-468g-4wmg","title":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the...","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:30:30Z","modified":"2025-05-05T18:33:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:02:07.964163Z"}],"nvd":[{"id":"CVE-2024-4323","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:15:08.72Z","modified":"2026-06-17T08:01:40.353Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:10:01.327642Z"}],"osv":[{"id":"AZL-42103","title":"CVE-2024-4323 affecting package fluent-bit for versions less than 3.0.6-1","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:15:08Z","modified":"2026-04-21T04:54:41.638324Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42162","title":"CVE-2024-4323 affecting package fluent-bit for versions less than 2.2.3-1","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:15:08Z","modified":"2026-04-21T04:29:26.532225Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"CVE-2024-4323","title":"Fluent Bit Memory Corruption Vulnerability","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-20T12:06:21.696Z","modified":"2026-10-28T10:58:08.825507986Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:42.322107Z"},{"id":"BIT-fluent-bit-2024-4323","title":"Fluent Bit Memory Corruption Vulnerability","description":"A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.","status":"published","published":"2024-05-24T07:17:42.946Z","modified":"2026-09-08T08:47:31.923869458Z","updated_at":"2026-11-02T15:28:29.563843Z"}]}}