CVE-2024-50608: Null Pointer Dereference
An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user (with access to the endpoint) to perform a remote Denial of service attack. The crash happens because of a NULL pointer dereference when 0 (from the Content-Length) is passed to the function cflsdslen, which in turn tries to cast a NULL pointer into struct cflsds. This is related to processpayloadmetricsng() at promrwprot.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50608?
CVE-2024-50608 is classified as a critical vulnerability due to its potential to crash the Fluent Bit server.
How do I fix CVE-2024-50608?
To fix CVE-2024-50608, update Fluent Bit to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-50608?
CVE-2024-50608 affects users of Fluent Bit version 3.1.9 when using the Prometheus Remote Write input plugin.
What happens when CVE-2024-50608 is exploited?
Exploitation of CVE-2024-50608 can lead to a server crash due to improper handling of packets with Content-Length set to 0.
Is there a workaround for CVE-2024-50608?
As of now, it is recommended to upgrade Fluent Bit to avoid the impact of CVE-2024-50608, as no official workaround has been provided.