fluentd fluentd vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

An issue exists in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows malicious users to gain escalated privileges and execute arbitrary code due to a default password.

Fluentd Fluentd-ui 1.2.2 Fluentd Fluentd 1.8.0

9.8

CVSSv3

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution (RCE) vulnerability in non-default configurations of Fluentd allows unauthenticated malicious users to execute arbitrary code via specia...

Fluentd Fluentd Fedoraproject Fedora 37

7.5

CVSSv3

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service (ReDoS) vulnerability. A broken apache log with a certain ...

Fluentd Fluentd

7

CVSSv3

The td-agent-builder plugin prior to 2020-12-18 for Fluentd allows malicious users to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.

Td-agent-builder Project Td-agent-builder Debian Debian Linux 10.0

1 Github repository

8.8

CVSSv3

In Rancher 2 up to and including 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container.

Suse Rancher

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook