CVE-2025-29478

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-29478
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:treasuredata:fluent_bit:-:*:*:*:*:*:*:*
History

08 Dec 2025, 18:49

Type Values Removed Values Added
CPE cpe:2.3:a:fluentbit:fluent_bit:3.7.2:*:*:*:*:*:*:* cpe:2.3:a:treasuredata:fluent_bit:-:*:*:*:*:*:*:*
First Time Treasuredata fluent Bit
Treasuredata

21 Aug 2025, 01:06

Type Values Removed Values Added
References () https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md - () https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md - Exploit, Third Party Advisory
First Time Fluentbit
Fluentbit fluent Bit
CPE cpe:2.3:a:fluentbit:fluent_bit:3.7.2:*:*:*:*:*:*:*

08 Apr 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-400
Summary
  • (es) Un problema en fluent-bit v.3.7.2 permite que un atacante local provoque una denegación de servicio a través de cfl_list_size en cfl_list.h:165.

07 Apr 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-07 20:15

Updated : 2025-12-08 18:49

NVD link : CVE-2025-29478

Mitre link : CVE-2025-29478

CVE.ORG link : CVE-2025-29478

JSON object : View

Products Affected

treasuredata

  • fluent_bit
CWE
CWE-400

Uncontrolled Resource Consumption