Back to search
CVE-2025-12970
Published: Nov 24, 2025
Modified: Jan 7, 2026
PUBLISHED
Description
The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.
| Vendor | Product | Versions |
|---|---|---|
FluentBit | Fluent Bit | affected 0 - < 4.0.12 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now