CVE-2021-27186

描述

Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.

受影響套件(1)

• Bitnami/fluent-bit>= 1.6.10, < 1.6.11

CVSS 分數

參考連結(4)

• WEBhttps://github.com/fluent/fluent-bit/issues/3044
• WEBhttps://github.com/fluent/fluent-bit/pull/3045
• WEBhttps://github.com/fluent/fluent-bit/pull/3047
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-27186