CVE-2024-23722

概要

参考情報

• fluent/fluent-bit · Patch
• medium.com/%40adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00 · Exploit

fluent bit のその他の脆弱性

• CVE-2025-12978中 5.4Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact…
• CVE-2025-12977緊急 9.1Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ab…
• CVE-2025-12972中 5.3Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugi…
• CVE-2025-12970高 8.8The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating leng…
• CVE-2025-12969中 6.5Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditi…