CVE-2024-23722
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
影響パッケージ
Bitnami
fluent-bit
[{"type":"SEMVER","events":[{"introduced":"2.1.8"},{"fixed":"2.2.2"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- web github.com
- web medium.com