{"id":"CVE-2024-23722","details":"In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.","aliases":["BIT-fluent-bit-2024-23722"],"modified":"2026-08-12T14:52:08.144647Z","published":"2024-03-26T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23722.json"},"references":[{"type":"WEB","url":"https://github.com/fluent/fluent-bit/compare/v2.2.1...v2.2.2"},{"type":"WEB","url":"https://medium.com/%40adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23722.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23722"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fluent/fluent-bit","events":[{"introduced":"1d83649441e9e9fdbb5ba83bffca11ac4ac7b83c"},{"fixed":"842a48223bdeb5da65db409eeb46b3f50acdcf7e"}],"database_specific":{"cpe":"cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.1.8"},{"fixed":"2.2.1"},{"fixed":"2.2.2"}],"source":["DESCRIPTION","CPE_RANGE"]}}],"versions":["v2.2.0","v2.1.9","v2.1.10","v2.1.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23722.json","vanir_signatures_modified":"2026-08-12T14:52:08Z","vanir_signatures":[{"digest":{"function_hash":"320431408164505883770738106810979250149","length":3664},"id":"CVE-2024-23722-5f3ff68a","signature_type":"Function","signature_version":"v1","source":"https://github.com/fluent/fluent-bit/commit/842a48223bdeb5da65db409eeb46b3f50acdcf7e","target":{"file":"plugins/in_elasticsearch/in_elasticsearch_bulk_prot.c","function":"in_elasticsearch_bulk_prot_handle"},"deprecated":false},{"target":{"file":"plugins/in_elasticsearch/in_elasticsearch_bulk_prot.c"},"deprecated":false,"digest":{"line_hashes":["12900398591467909537862406990407407153","275611033061265301844402903244709894178","218857048594049653399571228409886444707","121297384569911770298713098067593796942"],"threshold":0.9},"id":"CVE-2024-23722-7b1324aa","signature_type":"Line","signature_version":"v1","source":"https://github.com/fluent/fluent-bit/commit/842a48223bdeb5da65db409eeb46b3f50acdcf7e"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}