fluent-bit vulnerabilities (Azure Linux)
44 vulnerabilities.
-
fluent-bitAzure Linux Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler 9.2 Critical -
fluent-bitAzure Linux msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation 5.8 Medium -
fluent-bitAzure Linux c-ares: Memory-amplification denial of service via unvalidated DNS header record counts 5.3 Medium -
fluent-bitAzure Linux c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains 7.5 High -
fluent-bitAzure Linux c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP 7.5 High -
fluent-bitAzure Linux nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length 6.3 Medium -
fluent-bitAzure Linux A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey... 7.5 High -
fluent-bitAzure Linux An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit... 7.5 High -
fluent-bitAzure Linux c-ares has a Use After Free vulnerability when connection is cleaned up after error 5.9 Medium -
fluent-bitAzure Linux CVE-2025-12969 6.5 Medium -
fluent-bitAzure Linux CVE-2025-12977 9.1 Critical -
fluent-bitAzure Linux CVE-2025-12970 8.8 High -
fluent-bitAzure Linux WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode 2.1 Low -
fluent-bitAzure Linux WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified 6.9 Medium -
fluent-bitAzure Linux c-ares has a use-after-free in read_answers() 8.3 High -
fluent-bitAzure Linux An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the... 5.5 Medium -
fluent-bitAzure Linux An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the... 5.5 Medium -
fluent-bitAzure Linux An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and... 7.5 High -
fluent-bitAzure Linux An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is... 7.5 High -
fluent-bitAzure Linux wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer... 7.5 High -
fluent-bitAzure Linux An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f... 7.8 High -
fluent-bitAzure Linux XSS in Bootstrap button component 6.4 Medium -
fluent-bitAzure Linux Fluent Bit Memory Corruption Vulnerability 9.8 Critical -
fluent-bitAzure Linux A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0... 6.2 Medium -
fluent-bitAzure Linux Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
fluent-bitAzure Linux In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP... 7.5 High -
fluent-bitAzure Linux fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia... 7.5 High -
fluent-bitAzure Linux c-ares out of bounds read in ares__read_line() 4.4 Medium -
fluent-bitAzure Linux Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can... 5.5 Medium -
fluent-bitAzure Linux An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3... 7.5 High -
fluent-bitAzure Linux 0-byte UDP payload DoS in c-ares 7.5 High -
fluent-bitAzure Linux Insufficient randomness in generation of DNS query IDs in c-ares 5.9 Medium -
fluent-bitAzure Linux Buffer Underwrite in ares_inet_net_pton() 4.1 Medium -
fluent-bitAzure Linux Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum... 4.7 Medium -
fluent-bitAzure Linux An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access... 5.3 Medium -
fluent-bitAzure Linux Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
fluent-bitAzure Linux bootstrap Cross-site Scripting vulnerability 6.1 Medium -
fluent-bitAzure Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium