CVE-2025-29478

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 7, 2025
Updated: Apr 8, 2025
CWE ID 400

Summary

CVE-2025-29478 is a denial-of-service vulnerability affecting fluent-bit version 3.7.2. An attacker can exploit this issue by manipulating the cfl_list_size in cfl_list.h file located at line 165, causing the fluent-bit process to crash or consume excessive resources. This results in a denial of service for the affected system. It is recommended that users upgrade to the latest version of fluent-bit to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share