CVE-2021-27186

Description

Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.

Affected packages (1)

• Bitnami/fluent-bit>= 1.6.10, < 1.6.11

CVSS scores

References (4)

• WEBhttps://github.com/fluent/fluent-bit/issues/3044
• WEBhttps://github.com/fluent/fluent-bit/pull/3045
• WEBhttps://github.com/fluent/fluent-bit/pull/3047
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-27186