{"id":"BIT-fluent-bit-2025-12970","summary":"CVE-2025-12970","details":"The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.","aliases":["CVE-2025-12970"],"modified":"2025-12-01T21:42:55.181420Z","published":"2025-12-01T20:38:26.282Z","database_specific":{"cpes":["cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*"],"severity":"High"},"references":[{"type":"WEB","url":"https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12970"},{"type":"WEB","url":"https://www.oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover"}],"affected":[{"package":{"name":"fluent-bit","ecosystem":"Bitnami","purl":"pkg:bitnami/fluent-bit"},"ranges":[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.1"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/fluent-bit/BIT-fluent-bit-2025-12970.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}],"schema_version":"1.7.3"}