Executive Summary

The vulnerability exists in the extract_name function of the Fluent Bit in_docker input plugin. This function copies container names into a fixed size stack buffer without checking the length of the container name. An attacker who can create containers or control container names can supply a name that is too long, causing a buffer overflow. This overflow can lead to the process crashing or even allow the attacker to execute arbitrary code.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by causing the Fluent Bit process to crash, which may disrupt logging and telemetry data collection. More severely, it could allow an attacker to execute arbitrary code on the system running Fluent Bit, potentially leading to unauthorized access, data compromise, or further system exploitation.

Useful 0 Not Useful 0