Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2024-4323 EUVD-2024-43966GHSA-68mr-468g-4wmg

Fluent Bit Memory Corruption Vulnerability

Published May 20, 2024 · Updated Aug 19, 2024 · Assigned by tenable

Vendor: Fluent Bit Product: Fluent Bit Package: fluent-bit Ecosystem: Azure Linux

Description

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

Affected products

VendorProductAffectedFixed
Fluent Bit Fluent Bit 2.0.7 – ≤ 3.0.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 fluent-bit 3.0.6-1 —
Azure Linux 2 (CBL-Mariner) fluent-bit 2.2.3-1 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

  • skilfoy/CVE-2024-4323-Exploit-POC ★ 15 · May 20, 2024

    This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution.

  • d0rb/CVE-2024-4323 ★ 1 · May 21, 2024

    Critical heap buffer overflow vulnerability in the handle_trace_request and parse_trace_request functions of the Fluent Bit HTTP server.

  • yuansec/CVE-2024-4323-dos_poc ★ 0 · May 22, 2024

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References