CVE-2024-23722
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded...
Original description
The description as published by the source.
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
Affected packages
Bitnami
fluent-bit
[{"type":"SEMVER","events":[{"introduced":"2.1.8"},{"fixed":"2.2.2"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web github.com
- web medium.com