From 72541a2d87f483b4680edd0122e7624a4332bb7d Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 28 May 2024 14:53:48 +0100 Subject: [PATCH] add fluentbit info for CVE-2024-23722 Signed-off-by: Weston Steimel --- data/anchore/2024/CVE-2024-23722.json | 35 +++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 data/anchore/2024/CVE-2024-23722.json diff --git a/data/anchore/2024/CVE-2024-23722.json b/data/anchore/2024/CVE-2024-23722.json new file mode 100644 index 00000000..5055346e --- /dev/null +++ b/data/anchore/2024/CVE-2024-23722.json @@ -0,0 +1,35 @@ +{ + "additionalMetadata": { + "cna": "mitre", + "cveId": "CVE-2024-23722", + "reason": "Added CPE configurations because not yet analyzed by NVD.", + "references": [ + "https://github.com/fluent/fluent-bit/compare/v2.2.1...v2.2.2", + "https://medium.com/%40adurands82/fluent-bit-dos-vulnerability-cve-2024-23722-4e3e74af9d00" + ] + }, + "adp": { + "affected": [ + { + "cpes": [ + "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*" + ], + "product": "Fluent Bit", + "repo": "https://github.com/fluent/fluent-bit", + "vendor": "Fluent Bit", + "versions": [ + { + "lessThan": "2.2.2", + "status": "affected", + "version": "2.1.8", + "versionType": "semver" + } + ] + } + ], + "providerMetadata": { + "orgId": "00000000-0000-4000-8000-000000000000", + "shortName": "anchoreadp" + } + } +} \ No newline at end of file