Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GO-2023-2113
HistoryOct 16, 2023 - 7:30 p.m.

Memory exhaustion in go.opentelemetry.io/contrib/instrumentation

2023-10-1619:30:55
Google
osv.dev
15
memory exhaustion
opentelemetry
software

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON

Memory exhaustion in go.opentelemetry.io/contrib/instrumentation

Related

osv 57
prion 3
redhatcve 3
nvd 3
ubuntucve 3
gitlab 9
cvelist 3
github 3
cve 3
veracode 3
nessus 22
cbl_mariner 28
openvas 24
wolfi 2
alpinelinux 2
cgr 2
fedora 9
redhat 12
suse 4
debiancve 1
ibm 1
mageia 1
amazon 1
osv
osv
Uncontrolled Resource Consumption in promhttp
2022-02-16 22:26:35
CVE-2023-25151
2023-02-08 20:15:24
CVE-2022-21698
2022-02-15 16:15:08
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
Design/Logic Flaw
2023-10-12 17:15:00
Design/Logic Flaw
2022-02-15 16:15:00
redhatcve
redhatcve
CVE-2023-25151
2023-02-22 01:31:22
CVE-2023-45142
2023-10-27 22:28:41
CVE-2022-21698
2022-02-15 17:20:06
nvd
nvd
CVE-2023-25151
2023-02-08 20:15:24
CVE-2023-45142
2023-10-12 17:15:09
CVE-2022-21698
2022-02-15 16:15:08
ubuntucve
ubuntucve
CVE-2023-25151
2023-02-08 00:00:00
CVE-2023-45142
2023-10-12 00:00:00
CVE-2022-21698
2022-02-15 00:00:00
gitlab
gitlab
Uncontrolled Resource Consumption
2023-02-08 00:00:00
Uncontrolled Resource Consumption
2023-02-08 00:00:00
Allocation of Resources Without Limits or Throttling
2023-10-16 00:00:00
cvelist
cvelist
CVE-2023-25151 DoS vulnerability for high cardinality metrics in opentelemetry-go-contrib
2023-02-08 19:21:37
CVE-2023-45142 OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
2023-10-12 16:33:21
CVE-2022-21698 Uncontrolled Resource Consumption in promhttp
2022-02-15 00:00:00
github
github
otelhttp and otelbeego have DoS vulnerability for high cardinality metrics
2023-02-08 22:32:16
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
2023-10-16 14:01:54
Uncontrolled Resource Consumption in promhttp
2022-02-16 22:26:35
cve
cve
CVE-2023-25151
2023-02-08 20:15:24
CVE-2023-45142
2023-10-12 17:15:09
CVE-2022-21698
2022-02-15 16:15:08
veracode
veracode
Denial Of Service (DoS)
2023-02-10 09:48:31
Denial Of Service
2023-10-13 12:27:54
Denial Of Service (DoS)
2022-02-16 07:17:26
nessus
nessus
Fedora 39 : caddy (2024-22b915e51a)
2024-02-19 00:00:00
Fedora 40 : caddy (2024-19d093c14d)
2024-04-29 00:00:00
CBL Mariner 2.0 Security Update: kube-vip-cloud-provider / cert-manager / opa / docker-buildx / kubernetes / cri-tools (CVE-2023-45142)
2024-07-03 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-45142 affecting package kubernetes for versions less than 1.29.1-2
2024-03-19 17:21:46
CVE-2023-45142 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1
2024-07-22 15:42:40
CVE-2023-45142 affecting package opa for versions less than 0.63.0-1
2024-07-23 22:05:39
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-22b915e51a)
2024-02-20 00:00:00
Fedora: Security Advisory (FEDORA-2024-19d093c14d)
2024-09-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2140-1)
2022-06-21 00:00:00
wolfi
wolfi
CVE-2023-45142 vulnerabilities
2024-10-01 21:13:23
CVE-2022-21698 vulnerabilities
2024-10-01 21:13:23
alpinelinux
alpinelinux
CVE-2023-45142
2023-10-12 17:15:09
CVE-2022-21698
2022-02-15 16:15:08
cgr
cgr
CVE-2023-45142 vulnerabilities
2024-05-19 03:07:16
CVE-2022-21698 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 36 Update: stargz-snapshotter-0.11.3-2.fc36
2022-03-29 00:20:46
[SECURITY] Fedora 35 Update: skopeo-1.7.0-1.fc35
2022-04-02 01:54:38
[SECURITY] Fedora 36 Update: golang-github-prometheus-client-1.12.2-2.fc36
2022-07-01 01:09:36
redhat
redhat
(RHSA-2023:2014) Moderate: OpenShift Container Platform 4.11.39 bug fix and security update
2023-05-02 01:50:20
(RHSA-2022:4667) Moderate: OpenShift Virtualization 4.10.1 RPMs security and bug fix update
2022-05-18 15:34:20
(RHSA-2024:0641) Critical: OpenShift Container Platform 4.14.11 security and extras update
2024-02-07 16:38:38
suse
suse
Security update for golang-github-prometheus-node_exporter (moderate)
2022-10-26 00:00:00
Security update for firewalld, golang-github-prometheus-prometheus (important)
2022-04-27 00:00:00
Security update for golang-github-prometheus-alertmanager (important)
2022-06-20 00:00:00
debiancve
debiancve
CVE-2022-21698
2022-02-15 16:15:08
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to denial of service due to OpenTelemetry go module ( CVE-2023-45142, CVE-2023-47108 )
2024-03-20 17:49:09
mageia
mageia
Updated golang-github-prometheus-client packages fix security vulnerability
2022-05-15 13:06:40
amazon
amazon
Important: cri-tools
2024-02-01 19:57:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON
Related for OSV:GO-2023-2113
osv57prion3redhatcve3nvd3ubuntucve3gitlab9cvelist3github3cve3veracode3nessus22cbl_mariner28openvas24wolfi2alpinelinux2cgr2fedora9redhat12suse4debiancve1ibm1mageia1amazon1