CVE-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H

EPSS

0.18% chance of exploitation in the next 30 days, 8th percentile

Published

2025-04-04

Updated

2025-04-07

Proof-of-concept exploits (1)

• lmarch2/poc/blob/main/fluent-bit/fluent-bit.md

References

• CVE Record
• NVD entry

Related

• CVE-2025-29476
• CVE-2025-29478
• CVE-2025-29480
• CVE-2025-29481
• CVE-2025-29482
• CVE-2025-29471