AZL-71111
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-71111.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-71111
- Upstream
- Published
- 2025-11-24T15:15:46Z
- Modified
- 2026-04-21T04:36:31.584694Z
- Summary
- CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2
- Details
-
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.
- References