Executive brief
ReDoS vulnerability in parser_apache2
Affected products
- RubyGems fluentd
Junglewise Threat Intelligence
CVE-2021-41186: ReDoS vulnerability in parser_apache2
CVE-2021-41186 · Severity: low · CVSS 3.1 · Published 2021-11-01
Technologies: fluentd (RubyGems). Vendors: RubyGems.
Related threats
- Fluent Fluentd SSRF in out_http output plugin
- Fluent Fluentd denial of service via decompression bomb in input plugins
- Fluent Fluentd information disclosure in Monitor Agent plugin
- Fluent Fluentd path traversal in ${tag} placeholder
- fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)