← Back to browse · API

CVE-2024-4323

Severity
CRITICAL
CVSS
9.8
EPSS
0.28309
Risk score
49.11
CISA KEV
No
PoC
No
Published
2024-05-20
Modified
2024-08-19
First seen
2026-08-07
Aliases
EUVD-2024-43966, GHSA-68MR-468G-4WMG
Products
FluentBit:Fluent Bit 2.0.7 ≤3.0.3
Sources
euvd EUVD-2024-43966

Description

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

References