CVE-2020-35963

概要

参考情報

• bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
• fluentbit.io/announcements/v1.6.4 · Release Notes
• fluent/fluent-bit commit cadff53 · Patch

fluent bit のその他の脆弱性

• CVE-2025-12978中 5.4Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact…
• CVE-2025-12977緊急 9.1Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ab…
• CVE-2025-12972中 5.3Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugi…
• CVE-2025-12970高 8.8The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating leng…
• CVE-2025-12969中 6.5Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditi…