Skip to content
OpenAdvisories

Package · Azure Linux

fluent-bit

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-61674

    Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

    Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/out_forward/forward.c secure_forward_pong copies the server-controlled PONG[2] reason into the 32-byte stack buffer m…

    fluent fluent-bit fluent-bit Azure Linux
  • Critical 9.1
    CVE-2025-12977

    CVE-2025-12977

    Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as new…

    Fluent Bit Fluent Bit fluent-bit Azure Linux
  • Critical 9.8
    CVE-2024-4323 Public exploit EPSS 27%

    Fluent Bit Memory Corruption Vulnerability

    A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

    Fluent Bit Fluent Bit fluent-bit Azure Linux