OSV-2022-222

    Dashboard / Vulnerabilities / OSV-2022-222

    OSV-2022-222

    Published: 7 Mar 2022Last Modified: 13 Apr 2022

    Summary: Heap-use-after-free in cb_stdout_flush

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251 ``` Crash type: Heap-use-after-free READ {*} Crash state: cb_stdout_flush output_pre_cb_flush flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251

    Affected packages

    Package

    Name: fluent-bit

    Purl: pkg:generic/fluent-bit

    Affected ranges

    Type: GIT

    Events:

    Introduced- fcbc08efd431106563873cf888e50272a3f713fe
    Fixed -42b2d0ec7e8139b7e1f5724b18d83c4e7e450e5f

    Affected versions

    v1.9.0
    v1.9.0-ci-test-1
    v1.9.0-rc3
    v1.9.0-rc4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-222 | CVE-DB