CRITICAL🇵🇱 Wersja polska

CVE-2021-36088

CVSS 9.8v3.1pub. 2021-07-01upd. 2024-11-21

Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Treasuredata Fluent Bit

    APP
    Treasuredata
    1.7.0 – 1.7.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-12977CRITICAL9.1PL ✓ten sam produkt

Fluent Bit: brak sanityzacji tag_key umożliwia path traversal i wstrzyknięcie danych

CVE-2024-4323CRITICAL9.8PL ✓ten sam produkt

Krytyczna podatność memory corruption w Fluent Bit — RCE i ujawnienie danych

CVE-2025-12970HIGH8.8ten sam produkt

The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack ...

CVE-2024-50609HIGH7.5ten sam produkt

An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on a...

CVE-2024-50608HIGH7.5ten sam produkt

An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and list...