CVE-2024-23722 PoC — Fluent Bit 安全漏洞

Source

https://github.com/alexcote1/CVE-2024-23722-poc

Associated Vulnerability

Title:Fluent Bit 安全漏洞 (CVE-2024-23722)
Description:In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.

Readme

# CVE-2024-23722-poc

Usage 
``` 
python3 exploit.py http://127.0.0.1:8888
port is currently not open
port is currently not open
port is currently not open
port is currently not open
Server might have crashed
port is currently not open
port is currently not open
port is currently not open
Server might have crashed
port is currently not open
```

write up on the issue 
https://medium.com/@adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00

Effects fluentbit versions 2.1.8 through 2.2.1

File Snapshot


 [4.0K]  /data/pocs/90b1c0143aa0324ec5b0e9a6810efa8155ed44a5
├── [1.0K]  exploit.py
└── [ 507]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!