Fluent Bit Product Security Update Advisory

Overview

 

An update has been released to address vulnerabilities in Fluent Bit products. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

Fluent Bit versions: 2.0.7 (inclusive) to 3.0.3 (inclusive)

 

Resolved Vulnerabilities

 

Memory corruption vulnerability in the parsing of trace requests in the embedded http server (CVE-2024-4323)

 

Vulnerability Patches

 

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest vulnerability patches version.

Fluent Bit 3.0.4 version

 

Referenced Sites

 

[1] CVE-2024-4323 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-4323

[2] Fluent Bit Memory Corruption Vulnerability

https://www.tenable.com/security/research/tra-2024-17