AZL-37083 CVE-2024-23722 affecting package fluent-bit for versions less than 2.2.2-1

🗓️ 26 Mar 2024 15:15:49Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Fluent Bit versions 2.1.8 to 2.2.1 crash on invalid http form payload, causing logs not delivered.

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for NULL Pointer Dereference in Treasuredata Fluent_Bit	25 Mar 202417:50	–	githubexploit
CBLMariner	CVE-2024-23722 affecting package fluent-bit for versions less than 2.2.2-1	10 Apr 202421:48	–	cbl_mariner
CNNVD	Fluent Bit 安全漏洞	26 Mar 202400:00	–	cnnvd
CVE	CVE-2024-23722	26 Mar 202400:00	–	cve
Cvelist	CVE-2024-23722	26 Mar 202400:00	–	cvelist
Tenable Nessus	CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-23722)	23 Apr 202400:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 : Netdata vulnerabilities (USN-7250-1)	3 Feb 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-23722	2 Sep 202500:00	–	nessus
Microsoft CVE	In Fluent Bit 2.1.8 through 2.2.1 a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.	1 Apr 202407:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Mariner	13 Aug 202418:23	–	ncsc