Fluent Bit: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-50608

  An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on …

  fluent-bit Azure Linux
  Feb 18, 2025
• High 7.5
  CVE-2024-50609

  An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP addr…

  fluent-bit Azure Linux
  Feb 18, 2025

Revision history

1. 2025-02-18 #1

   Initiale Fassung

References

• Red Hat Bugtracker #2346306 vom 2025-02-18
  https://bugzilla.redhat.com/show_bug.cgi?id=2346306
• Red Hat Bugtracker #2346309 vom 2025-02-18
  https://bugzilla.redhat.com/show_bug.cgi?id=2346309
• GitHub Advisory Database vom 2025-02-18
  https://github.com/advisories/GHSA-4g89-mg9x-4chc
• GitHub Advisory Database vom 2025-02-18
  https://github.com/fluent/fluent-bit/releases
• PoC vom 2025-02-18
  https://www.ebryx.com/blogs/exploring-cve-2024-50608-and-cve-2024-50609