OSV-2023-685

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2023-685.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-685
Published
2023-08-11T14:02:10.018940Z
Modified
2024-09-01T14:21:29.336035Z
Summary
Invalid-free in reset_context
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339

Crash type: Invalid-free
Crash state:
reset_context
cmt_decode_prometheus_create
cmetrics_decode_fuzz.c
References

Affected packages

OSS-Fuzz / fluent-bit

Package

Name
fluent-bit
Purl
pkg:generic/fluent-bit

Affected versions

v2.*

v2.1.10
v2.1.5
v2.1.5-windows-artifact-fix
v2.1.6
v2.1.7
v2.1.8
v2.1.9
v2.2.0
v2.2.1
v2.2.2
v2.2.3

v3.*

v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.0.6
v3.0.7
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.1.6

Ecosystem specific

{
    "severity": "HIGH"
}