Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-23722

🗓️ 26 Mar 2024 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 86 Views🌐 WEB

Fluent Bit NULL pointer dereference in HTT

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for NULL Pointer Dereference in Treasuredata Fluent_Bit
25 Mar 202417:50
–githubexploit
BDU FSTEC		The vulnerability of the Fluent Bit logging collection and processing tool, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.
17 Mar 202500:00
–bdu_fstec
CBLMariner		CVE-2024-23722 affecting package fluent-bit for versions less than 2.2.2-1
10 Apr 202421:48
–cbl_mariner
CNNVD		Fluent Bit 安全漏洞
26 Mar 202400:00
–cnnvd
Cvelist		CVE-2024-23722
26 Mar 202400:00
–cvelist
Tenable Nessus		CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-23722)
23 Apr 202400:00
–nessus
Tenable Nessus		Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 : Netdata vulnerabilities (USN-7250-1)
3 Feb 202500:00
–nessus
Tenable Nessus		Linux Distros Unpatched Vulnerability : CVE-2024-23722
2 Sep 202500:00
–nessus
Microsoft CVE		In Fluent Bit 2.1.8 through 2.2.1 a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
1 Apr 202407:00
–mscve
NCSC		Vulnerabilities fixed in Microsoft Mariner
13 Aug 202418:23
–ncsc
Rows per page
NVD
Vulnrichment
Node
treasuredatafluent_bitRange2.1.8–2.2.2
ParameterPositionPathDescriptionCWE
http_payloadrequest body127.0.0.1:8888NULL pointer dereference via invalid HTTP payload (content type application/x-www-form-urlencoded) that crashes Fluent Bit 2.1.8–2.2.1 and prevents restart.CWE-476

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:13Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.17.5
EPSS0.00944
SSVC
CWE-476
fluent bitnull pointerhttp payloadx-www-form-urlencodedcrashlogs delivery
86