Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Fluent‑Bit 3.1.10‑7 may crash when locally triggered
published 1 year ago
Summary
The Fluent‑Bit logging agent version 3.1.10‑7 (and related Azure package) contains a flaw that lets someone with access to the server cause the program to stop working. This can interrupt log collection and affect monitoring. Apply the vendor’s update or patch to a newer version as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | fluent-bit | <= 3.1.10-6 |
| Azure Linux:3 | – | fluent-bit | <= 3.1.10-7 |
Original advisory text
CVE-2025-29478 affecting package fluent-bit 3.1.10-7
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.
References
Timeline
Published7 Apr 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-59733 · OSV
Track software like this
Free during beta