Known Vulnerabilities for products from Treasuredata
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Treasuredata".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-46879 json | An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a he... | 7.8 - HIGH | 2023-04-11 | 2023-04-26 |
| CVE-2021-46878 json | An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type... | 7.8 - HIGH | 2023-04-11 | 2023-04-26 |
| CVE-2021-36088 json | Fluent Bit (aka fluent-bit) 1.7.0 through 1.7,4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_... | 9.8 - CRITICAL | 2021-07-01 | 2021-07-08 |
| CVE-2021-27186 json | Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_serve... | 7.5 - HIGH | 2021-02-10 | 2021-02-16 |
| CVE-2020-35963 json | flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct cal... | 7.8 - HIGH | 2021-01-03 | 2021-01-08 |
| CVE-2019-9749 json | An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server... | 7.5 - HIGH | 2019-03-13 | 2021-07-21 |
Known software with vulnerabilities from Treasuredata
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Treasuredata | Fluent Bit | 0.1 |