OSV-2023-685

    Dashboard / Vulnerabilities / OSV-2023-685

    OSV-2023-685

    Published: 11 Aug 2023Last Modified: 1 Sept 2024

    Summary: Invalid-free in reset_context

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339 ``` Crash type: Invalid-free Crash state: reset_context cmt_decode_prometheus_create cmetrics_decode_fuzz.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339

    Affected packages

    Package

    Name: fluent-bit

    Purl: pkg:generic/fluent-bit

    Affected ranges

    Type: GIT

    Events:

    Introduced- 3c7cfed0fbd446a55a7e7e5889b9a43147405c4d
    Fixed -None

    Affected versions

    v2.1.10
    v2.1.5
    v2.1.5-windows-artifact-fix
    v2.1.6
    v2.1.7
    v2.1.8
    v2.1.9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-685 | CVE-DB