CVE-2024-4323

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

CVSS v3.0 9.8 CRITICAL

9.8^/10

CVSS v3.0 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04	Patch
https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04	Patch
https://tenable.com/security/research/tra-2024-17	Patch Third Party Advisory
https://tenable.com/security/research/tra-2024-17	Patch Third Party Advisory
https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:treasuredata:fluent_bit::::::::
	cpe:2.3:a:treasuredata:fluent_bit::::::::

History

05 May 2025, 17:03

Type	Values Removed	Values Added
CWE		CWE-787
CPE		cpe:2.3:a:treasuredata:fluent_bit::::::::
First Time		Treasuredata Treasuredata fluent Bit
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
References		() https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323 - Exploit, Third Party Advisory
References	~~() https://tenable.com/security/research/tra-2024-17 -~~	() https://tenable.com/security/research/tra-2024-17 - Patch, Third Party Advisory
References	~~() https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04 -~~	() https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04 - Patch

20 May 2024, 13:00

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-20 12:15

Updated : 2025-05-05 17:03

NVD link : CVE-2024-4323

Mitre link : CVE-2024-4323

JSON object : View

Products Affected

treasuredata

fluent_bit

CWE

CWE-787

Out-of-bounds Write

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "name": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "tags": ["Patch"], "refsource": ""}, {"url": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "name": "https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04", "tags": ["Patch"], "refsource": ""}, {"url": "https://tenable.com/security/research/tra-2024-17", "name": "https://tenable.com/security/research/tra-2024-17", "tags": ["Patch", "Third Party Advisory"], "refsource": ""}, {"url": "https://tenable.com/security/research/tra-2024-17", "name": "https://tenable.com/security/research/tra-2024-17", "tags": ["Patch", "Third Party Advisory"], "refsource": ""}, {"url": "https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323", "name": "https://www.vicarius.io/vsociety/posts/linguistic-lumberjack-memory-corruption-in-fluent-bit-cve-2024-4323", "tags": ["Exploit", "Third Party Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server\u2019s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-787"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-4323", "ASSIGNER": "vulnreport@tenable.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}}, "publishedDate": "2024-05-20T12:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.2.3", "versionStartIncluding": "2.0.7"}, {"cpe23Uri": "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "3.0.4", "versionStartIncluding": "3.0.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-05-05T17:03Z"}