CVE-2021-46879 | BDVDB-2026-199680 Detail

Description#

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-11Record published in the CVE List.
2. Version 22025-02-11Most recent update recorded in the CVE List.