Vulnerabilities > CVE-2020-35963 - Out-of-bounds Write vulnerability in Treasuredata Fluent BIT

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

treasuredata

CWE-787

NVD

Published: 2021-01-03

Updated: 2024-11-21

Summary

flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion.

Vulnerable Configurations

Part	Description	Count
Application	Treasuredata Treasuredata Fluent BIT 0.1 Treasuredata Fluent BIT 0.2 Treasuredata Fluent BIT 0.3 Treasuredata Fluent BIT 0.4 Treasuredata Fluent BIT 0.5 Treasuredata Fluent BIT 0.5.1 Treasuredata Fluent BIT 0.6.0 Treasuredata Fluent BIT 0.7.0 Treasuredata Fluent BIT 0.7.1 Treasuredata Fluent BIT 0.7.2 Treasuredata Fluent BIT 0.8.0 Treasuredata Fluent BIT 0.8.1 Treasuredata Fluent BIT 0.8.2 Treasuredata Fluent BIT 0.8.3 Treasuredata Fluent BIT 0.8.4 Treasuredata Fluent BIT 0.8.5 Treasuredata Fluent BIT 0.9.0 Treasuredata Fluent BIT 0.9.1 Treasuredata Fluent BIT 0.10.0 Treasuredata Fluent BIT 0.10.1 Treasuredata Fluent BIT 0.11.0 Treasuredata Fluent BIT 0.11.1 Treasuredata Fluent BIT 0.11.2 Treasuredata Fluent BIT 0.11.3 Treasuredata Fluent BIT 0.11.4 Treasuredata Fluent BIT 0.11.5 Treasuredata Fluent BIT 0.11.6 Treasuredata Fluent BIT 0.11.7 Treasuredata Fluent BIT 0.11.8 Treasuredata Fluent BIT 0.11.9 Treasuredata Fluent BIT 0.11.10 Treasuredata Fluent BIT 0.11.11 Treasuredata Fluent BIT 0.11.12 Treasuredata Fluent BIT 0.11.13 Treasuredata Fluent BIT 0.11.14 Treasuredata Fluent BIT 0.11.15 Treasuredata Fluent BIT 0.11.16 Treasuredata Fluent BIT 0.11.17 Treasuredata Fluent BIT 0.12.0 Treasuredata Fluent BIT 0.12.1 Treasuredata Fluent BIT 0.12.2 Treasuredata Fluent BIT 0.12.3 Treasuredata Fluent BIT 0.12.4 Treasuredata Fluent BIT 0.12.5 Treasuredata Fluent BIT 0.12.6 Treasuredata Fluent BIT 0.12.7 Treasuredata Fluent BIT 0.12.8 Treasuredata Fluent BIT 0.12.9 Treasuredata Fluent BIT 0.12.10 Treasuredata Fluent BIT 0.12.11 Treasuredata Fluent BIT 0.12.12 Treasuredata Fluent BIT 0.12.13 Treasuredata Fluent BIT 0.12.14 Treasuredata Fluent BIT 0.12.15 Treasuredata Fluent BIT 0.12.16 Treasuredata Fluent BIT 0.12.17 Treasuredata Fluent BIT 0.12.18 Treasuredata Fluent BIT 0.12.19 Treasuredata Fluent BIT 0.13.0 Treasuredata Fluent BIT 0.13.1 Treasuredata Fluent BIT 0.13.2 Treasuredata Fluent BIT 0.13.3 Treasuredata Fluent BIT 0.13.4 Treasuredata Fluent BIT 0.13.5 Treasuredata Fluent BIT 0.13.6 Treasuredata Fluent BIT 0.13.7 Treasuredata Fluent BIT 0.13.8 Treasuredata Fluent BIT 0.14.0 Treasuredata Fluent BIT 0.14.1 Treasuredata Fluent BIT 0.14.2 Treasuredata Fluent BIT 0.14.3 Treasuredata Fluent BIT 0.14.4 Treasuredata Fluent BIT 0.14.5 Treasuredata Fluent BIT 0.14.6 Treasuredata Fluent BIT 0.14.7 Treasuredata Fluent BIT 0.14.8 Treasuredata Fluent BIT 0.14.9 Treasuredata Fluent BIT 1.0.0 Treasuredata Fluent BIT 1.0.1 Treasuredata Fluent BIT 1.0.2 Treasuredata Fluent BIT 1.0.3 Treasuredata Fluent BIT 1.0.4 Treasuredata Fluent BIT 1.0.5 Treasuredata Fluent BIT 1.0.6 Treasuredata Fluent BIT 1.1.0 Treasuredata Fluent BIT 1.1.1 Treasuredata Fluent BIT 1.1.2 Treasuredata Fluent BIT 1.1.3 Treasuredata Fluent BIT 1.2.0 Treasuredata Fluent BIT 1.2.1 Treasuredata Fluent BIT 1.2.2 Treasuredata Fluent BIT 1.3.0 Treasuredata Fluent BIT 1.3.1 Treasuredata Fluent BIT 1.3.2 Treasuredata Fluent BIT 1.3.3 Treasuredata Fluent BIT 1.3.4 Treasuredata Fluent BIT 1.3.5 Treasuredata Fluent BIT 1.3.6 Treasuredata Fluent BIT 1.3.7 Treasuredata Fluent BIT 1.3.8 Treasuredata Fluent BIT 1.3.9 Treasuredata Fluent BIT 1.3.10 Treasuredata Fluent BIT 1.3.11 Treasuredata Fluent BIT 1.4.0 Treasuredata Fluent BIT 1.4.1 Treasuredata Fluent BIT 1.4.2 Treasuredata Fluent BIT 1.4.3 Treasuredata Fluent BIT 1.4.4 Treasuredata Fluent BIT 1.4.5 Treasuredata Fluent BIT 1.4.6 Treasuredata Fluent BIT 1.5.0 Treasuredata Fluent BIT 1.5.1 Treasuredata Fluent BIT 1.5.2 Treasuredata Fluent BIT 1.5.3 Treasuredata Fluent BIT 1.5.4 Treasuredata Fluent BIT 1.5.5 Treasuredata Fluent BIT 1.5.6 Treasuredata Fluent BIT 1.5.7 Treasuredata Fluent BIT 1.6.0 Treasuredata Fluent BIT 1.6.1 Treasuredata Fluent BIT 1.6.2 Treasuredata Fluent BIT 1.6.3	122
OS	Linux Linux Linux Kernel -	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References