Fluent Bit in_docker Input Plugin Buffer Overflow Vulnerability Allowing Code Execution

A buffer overflow vulnerability has been identified in the Fluent Bit in_docker input plugin, specifically in version 4.1.0. The issue arises in the extract_name function, which copies container names into a fixed-size stack buffer without proper length validation. This flaw allows an attacker who can create containers or control container names to supply a long name that overflows the buffer, potentially leading to a process crash or arbitrary code execution.

Impact

Exploitation of this vulnerability can result in a process crash or arbitrary code execution.