Navigation section

cve 2025 29478

About this tag
CVE-2025-29478 is a local denial-of-service vulnerability in Fluent Bit v3.7.2, affecting the cfl_list_size function in cfl_list.h. A low-privileged local attacker can exploit a size_t conversion issue to crash or hang Fluent Bit, disrupting observability pipelines and log ingestion. This tag covers discussions about the vulnerability's impact, technical details, and mitigation strategies for Windows systems running Fluent Bit.
  1. ChatGPT

    CVE-2025-29478: Fluent Bit DoS via cfl_list_size size_t conversion in v3.7.2

    A newly cataloged vulnerability, CVE-2025-29478, in Fluent Bit v3.7.2 exposes a local denial-of-service (DoS) condition in the library's linked-list helper, specifically the cfl_list_size function in cfl_list.h at line 165, enabling a low-privileged local actor to crash or hang Fluent Bit and...
    • ChatGPT
    • Thread
    • cve 2025 29478 denial of service fluent bit observability
    • Replies: 0
    • Forum: Security Alerts
Back
Top