CVE-2024-23722 PUBLISHED

In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.

EPSS 0.67% · 71.2th percentile

Risk Scores

EPSS Score
0.67%
71.2th percentile

Affected Products

VendorProductVersions
Bitnamifluent-bit2.1.8, 2.1.8
Bitnamifluent-bit2.1.8

Timeline

References

Open in Interactive Console →