CVE-2024-4323
CRITICALFluent Bit 2.0.7-3.0.3 - Heap-based Buffer Overflow in HTTP Server Trace Request Parsing
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-4323. PoCs published by skilfoy, d0rb, yuansec.
AI-analyzed exploit summary The repository contains a functional Python script that exploits CVE-2024-4323, a memory corruption vulnerability in Fluent Bit's HTTP server. The PoC sends a crafted HTTP request with an oversized payload to trigger a buffer overflow, potentially leading to remote code execution.
Description
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
Exploits (3)
The repository contains a functional Python script that exploits CVE-2024-4323, a memory corruption vulnerability in Fluent Bit's HTTP server. The PoC sends a crafted HTTP request with an oversized payload to trigger a buffer overflow, potentially leading to remote code execution.
The repository contains a functional PoC for CVE-2024-4323, demonstrating a heap buffer overflow in Fluent Bit's HTTP server via a crafted POST request with an oversized payload. The README provides a detailed technical analysis of the vulnerability, including vulnerable code snippets and mitigation strategies.
This repository contains a functional proof-of-concept exploit for CVE-2024-4323, which targets a memory corruption vulnerability in an unspecified API endpoint. The exploit sends a crafted JSON payload with an excessively long string to trigger a denial-of-service (DoS) condition.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H