Sploitus

16 exploited vulnerabilities in Fluent-Bit

Vulnerabilities with publicly known exploits

Vendors
Unknown, Red Os, Splunk, Fluentd, Alt Linux, Linux Mint
With known exploits
16
Affected Treasuredata Fluent Bit versions
< 2.2.3, 3.0.4, 2.2.2, 3.1.9

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2024-4323 2 exploits
CVSS 10.0 CRITICAL 2024-04-29FIX AVAILABLE
Exploit for Out-of-bounds Write in Treasuredata Fluent_BitExploit for Out-of-bounds Write in Treasuredata Fluent_Bit
CVE-2021-36088
CVSS 9.8 CRITICAL 2021-07-01
CVE-2025-12977
CVSS 9.4 CRITICAL 2025-11-24
CVE-2025-12970
CVSS 9.0 HIGH 2025-11-23
CVE-2024-50608
CVSS 7.8 HIGH 2025-02-18
CVE-2024-23722 1 exploit
CVSS 7.8 HIGH 2024-03-25
Exploit for NULL Pointer Dereference in Treasuredata Fluent_Bit
CVE-2020-35963
CVSS 7.8 HIGH 2020-11-07FIX AVAILABLE
CVE-2024-50609
CVSS 7.5 HIGH 2025-02-18
CVE-2024-26455
CVSS 7.5 HIGH 2024-02-26FIX AVAILABLE
CVE-2021-27186
CVSS 7.5 HIGH 2021-02-10
CVE-2019-9749
CVSS 7.5 HIGH 2019-03-13FIX AVAILABLE
CVE-2025-12969
CVSS 6.5 MEDIUM 2025-11-23
CVE-2025-12978
CVSS 5.5 MEDIUM 2025-09-24
CVE-2025-29478
CVSS 5.5 MEDIUM 2025-04-07
CVE-2025-29477
CVSS 5.5 MEDIUM 2025-04-04FIX AVAILABLE
CVE-2025-12972
CVSS 5.3 MEDIUM 2025-11-23FIX AVAILABLE