CVE-2024-4323criticalCWE-122

CVE-2024-4323: critical vulnerability in Fluent Bit

Fluent Bit Memory Corruption Vulnerability

Published · Updated

Follow this CVE+ Monitor Fluent Bit

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

53Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 27%
from disclosure to weaponsame day
Published on NVDMay 20
1st PoCMay 20
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Fluent Bit · Fluent Bit
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.