opentelemetry-ebpf-instrumentation vulnerabilities
5 known vulnerabilities in opentelemetry-ebpf-instrumentation from Open-telemetry. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
opentelemetry-ebpf-instrumentation: Integer Overflow or Wraparound
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause
- 7.5 High severity
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry…
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthent
- 7.5 High severity
opentelemetry-ebpf-instrumentation: Uncontrolled Resource Consumption
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy systems, the run-count delta ca
- 7.5 High severity
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry…
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated
- 8.4 High severity
opentelemetry-ebpf-instrumentation: Improper Limitation of a Pathname to a Restricted Directory
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files when