Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms
ID: c82066c5-a4a1-5e0e-b0d9-a4124093d5fb
STIX ID: report--c82066c5-a4a1-5e0e-b0d9-a4124093d5fb
Feed Name: Dark Reading
Threat Score
Tenable disclosed a critical memory-corruption vulnerability in Fluent Bit (CVE-2024-4323) affecting versions 2.0.7–3.0.3: malformed inputs to the /api/v1/traces endpoint can cause service crashes, leak internal data, and potentially enable remote code execution; maintainers released a fix and administrators are urged to update or restrict access to the monitoring API.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.