Ebpf Instrumentation vulnerabilities
4 known vulnerabilities in Ebpf Instrumentation from OpenTelemetry. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
opentelemetry-ebpf-instrumentation: Integer Overflow or Wraparound
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause
- 7.5 High severity
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry…
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthent
- 7.5 High severity
opentelemetry-ebpf-instrumentation: Uncontrolled Resource Consumption
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy systems, the run-count delta ca
- 7.5 High severity
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry…
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated