Buffer Overflow Vulnerability in Fluent Bit's Docker Input Plugin

CVE-2025-12970

What is CVE-2025-12970?

The Fluent Bit Docker input plugin has a buffer overflow vulnerability in its extract_name function. This issue arises from the copying of container names into a fixed-size stack buffer without adequate length validation. If an attacker gains the ability to create containers or manipulate container names, they can exploit this weakness by providing a long name, resulting in a buffer overflow. This can cause the process to crash or allow for arbitrary code execution, posing significant risks to the affected environment.

References