Vulnerabilitycritical
Critical Fluent Bit Bug Impacts All Major Cloud Platforms
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-4323 | A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3 | 9.8 | 27% | PoC |
From the original article
2 min read at infosecurity-magazine.com
Security researchers have warned of another critical software supply chain vulnerability – this time affecting a popular logging utility with 13 billion downloads. Tenable claimed that a memory corruption vulnerability (CVE-2024-4323) in Fluent Bit’s HTTP server could potentially result in denial of service (DoS), information leakage and remote code execution (RCE).
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.