Critical Vulnerability in Fluent Bit

Security updates have been released to address a critical vulnerability (CVE-2024-4323) affecting Fluent Bit. The vulnerability has a Common Vulnerability Scoring System (CVSSv3.1) score of 9.8 out of 10.

Successful exploitation of the memory corruption vulnerability could result in denial of service, data leakage, or remote code execution.

The vulnerability affects Fluent Bit versions 2.0.7 through 3.0.3.

Users and administrators of affected versions of Fluent Bit are advised to update to the latest version immediately.

More information is available here:

https://fluentbit.io/blog/2024/05/21/statement-on-cve-2024-4323-and-its-fix/

https://www.darkreading.com/cloud-security/critical-bug-dos-rce-data-leaks-in-all-major-cloud-platforms