← All advisories

Unrated severityNVD Advisory· Published Feb 10, 2021· Updated Aug 3, 2024

CVE-2021-27186

CVE-2021-27186

Description

Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Fluent Bit/Fluent Bitdescription
Fluent Bit/Fluent Bitllm-fuzzy
Range: = 1.6.10
osv-coords
pkg:bitnami/fluent-bit
Range: >= 1.6.10, < 1.6.11

Patches

Vulnerability mechanics

References

3

github.com/fluent/fluent-bit/issues/3044mitrex_refsource_MISC
github.com/fluent/fluent-bit/pull/3045mitrex_refsource_MISC
github.com/fluent/fluent-bit/pull/3047mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.