CVE-2024-4323

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04	Patch
https://tenable.com/security/research/tra-2024-17	Patch Third Party Advisory
https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04	Patch
https://tenable.com/security/research/tra-2024-17	Patch Third Party Advisory
https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:treasuredata:fluent_bit::::::::
	cpe:2.3:a:treasuredata:fluent_bit::::::::

History

No history.

Information

Published : 2024-05-20 12:15

Updated : 2025-05-05 17:03

NVD link : CVE-2024-4323

Mitre link : CVE-2024-4323

CVE.ORG link : CVE-2024-4323

JSON object : View

Products Affected

treasuredata

fluent_bit

CWE

CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2024-4323", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-20T12:15:08.720", "references": [{"url": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://tenable.com/security/research/tra-2024-17", "tags": ["Patch", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://tenable.com/security/research/tra-2024-17", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-122"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server\u2019s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution."}, {"lang": "es", "value": "Una vulnerabilidad de corrupci\u00f3n de memoria en las versiones 2.0.7 a 3.0.3 de Fluent Bit. Este problema radica en el an\u00e1lisis de las solicitudes de seguimiento por parte del servidor http integrado y puede dar lugar a condiciones de denegaci\u00f3n de servicio, divulgaci\u00f3n de informaci\u00f3n o ejecuci\u00f3n remota de c\u00f3digo."}], "lastModified": "2025-05-05T17:03:14.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "991D24B7-FA94-42A6-80A8-D9E6DE71D9C3", "versionEndExcluding": "2.2.3", "versionStartIncluding": "2.0.7"}, {"criteria": "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF85ED4D-A6E9-4117-A91B-43644AF45CA9", "versionEndExcluding": "3.0.4", "versionStartIncluding": "3.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}