fluentd vulnerabilities

Products

• fluentd 2
• fluentbit 1

Latest fluentd CVEs

Newest publication first

1. CVE-2024-26455 fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

   Published 2024-02-26

   High·CVSS 7.5

   fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

2. CVE-2021-41186 ReDoS vulnerability in parser_apache2

   Published 2021-10-29

   High·CVSS 7.5 PoC

   Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service (ReDoS) vulnerability. A broken apache log with a certain...

3. CVE-2017-10906 Fluentd Escape Sequence Injection Vulnerability

   Published 2017-12-08

   Critical·CVSS 9.8 PoC

   Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.