Vulnerabilities > CVE-2021-27186 - NULL Pointer Dereference vulnerability in Treasuredata Fluent BIT 1.6.10
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |