In Fluent Bit 2.1.8 through 2.2.1 a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
| Reporter | Title | Published | Views | Family All 26 |
|---|---|---|---|---|
 | Exploit for NULL Pointer Dereference in Treasuredata Fluent_Bit | 25 Mar 202417:50 | – | githubexploit |
 | The vulnerability of the Fluent Bit logging collection and processing tool, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure. | 17 Mar 202500:00 | – | bdu_fstec |
 | CVE-2024-23722 affecting package fluent-bit for versions less than 2.2.2-1 | 10 Apr 202421:48 | – | cbl_mariner |
 | Fluent Bit 安全漏洞 | 26 Mar 202400:00 | – | cnnvd |
 | CVE-2024-23722 | 26 Mar 202400:00 | – | cve |
 | CVE-2024-23722 | 26 Mar 202400:00 | – | cvelist |
 | CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-23722) | 23 Apr 202400:00 | – | nessus |
| Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 : Netdata vulnerabilities (USN-7250-1) | 3 Feb 202500:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2024-23722 | 2 Sep 202500:00 | – | nessus |
 | Vulnerabilities fixed in Microsoft Mariner | 13 Aug 202418:23 | – | ncsc |
10
Node
OR
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
18 Feb 2026 10:09Current
7High risk
Vulners AI Score7
CVSS 3.17.5
EPSS0.00944
SSVC