opentelemetry kayıtları
opentelemetry üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %94,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-770 Allocation of Resources Without Limits or Throttling7
- CWE-789 Memory Allocation with Excessive Size Value7
- CWE-20 Improper Input Validation3
- CWE-400 Uncontrolled Resource Consumption3
- CWE-426 Untrusted Search Path2
- CWE-208 Observable Timing Discrepancy2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2026-41433İstismar yok | OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIRopentelemetry · opentelemetry ebpf instrumentation · CWE-22 | Yüksek8,4 | — | %0,2 | 24 Nis 2026 |
32İzleyin | CVE-2026-42602İstismar yok | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replayopentelemetry · opentelemetry collector contrib · CWE-208 | Yüksek8,1 | — | %0,3 | 13 May 2026 |
31İzleyin | CVE-2026-42191İstismar yok | OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporteropentelemetry · opentelemetry.exporter.opentelemetryprotocol · CWE-379 | Yüksek7,8 | — | %0,1 | 12 May 2026 |
30İzleyin | CVE-2023-47108Kavram kanıtı | DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metricsopentelemetry · opentelemetry · CWE-770 | Yüksek7,5 | — | %1,6 | 10 Kas 2023 |
30İzleyin | CVE-2023-45142İstismar yok | OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metricsopentelemetry · opentelemetry · CWE-770 | Yüksek7,5 | — | %1,4 | 12 Eki 2023 |
30İzleyin | CVE-2024-36129İstismar yok | OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCopentelemetry · configgrpc · CWE-119 | Yüksek7,5 | — | %1,2 | 5 Haz 2024 |
30İzleyin | CVE-2026-29181İstismar yok | OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)opentelemetry · opentelemetry · CWE-770 | Yüksek7,5 | — | %0,9 | 7 Nis 2026 |
30İzleyin | CVE-2023-43810İstismar yok | opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metricsopentelemetry · opentelemetry · CWE-400 | Yüksek7,5 | — | %0,7 | 6 Eki 2023 |
30İzleyin | CVE-2026-45685İstismar yok | OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messagesopentelemetry · ebpf instrumentation · CWE-20 | Yüksek7,5 | — | %0,6 | 2 Haz 2026 |
30İzleyin | CVE-2026-45678İstismar yok | OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloadsopentelemetry · ebpf instrumentation · CWE-20 | Yüksek7,5 | — | %0,5 | 2 Haz 2026 |
30İzleyin | CVE-2026-45686İstismar yok | OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBIopentelemetry · ebpf instrumentation · CWE-190 | Yüksek7,5 | — | %0,5 | 2 Haz 2026 |
30İzleyin | CVE-2026-44902İstismar yok | opentelemetry-js: Prometheus exporter process crash via malformed HTTP requestopentelemetry · opentelemetry\/auto-instrumentations-node · CWE-755 | Yüksek7,5 | — | %0,5 | 27 May 2026 |
30İzleyin | CVE-2026-45680İstismar yok | OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPUopentelemetry · ebpf instrumentation · CWE-400 | Yüksek7,5 | — | %0,5 | 2 Haz 2026 |
30İzleyin | CVE-2026-42348İstismar yok | OpAMP client reads unbounded HTTP response bodiesopentelemetry · opentelemetry.opamp.client · CWE-789 | Yüksek7,5 | — | %0,4 | 12 May 2026 |
29İzleyin | CVE-2026-39883İstismar yok | OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijackingopentelemetry · opentelemetry · CWE-426 | Yüksek7,3 | — | %0,2 | 8 Nis 2026 |
28İzleyin | CVE-2026-24051İstismar yok | OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijackingopentelemetry · opentelemetry · CWE-426 | Yüksek7,0 | — | %0,2 | 2 Şub 2026 |
26İzleyin | CVE-2024-42368İstismar yok | open-telemetry has an Observable Timing Discrepancyopen-telemetry · opentelemetry-collector-contrib · CWE-208 | Orta6,5 | — | %0,6 | 13 Ağu 2024 |
26İzleyin | CVE-2026-45679İstismar yok | OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messagesopentelemetry · ebpf instrumentation · CWE-117 | Orta6,5 | — | %0,3 | 2 Haz 2026 |
23İzleyin | CVE-2026-40182İstismar yok | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodiesopentelemetry · opentelemetry · CWE-789 | Orta5,9 | — | %0,6 | 23 Nis 2026 |
23İzleyin | CVE-2026-41484İstismar yok | OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response bodyopentelemetry · opentelemetry.exporter.onecollector · CWE-770 | Orta5,9 | — | %0,4 | 6 May 2026 |
23İzleyin | CVE-2026-45681İstismar yok | OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB sizeopentelemetry · ebpf instrumentation · CWE-125 | Orta5,9 | — | %0,4 | 2 Haz 2026 |
23İzleyin | CVE-2026-41483İstismar yok | Unbounded HTTP response body read in OpenTelemetry.Resources.Azureopentelemetry · opentelemetry.resources.azure · CWE-770 | Orta5,9 | — | %0,4 | 6 May 2026 |
23İzleyin | CVE-2026-41078İstismar yok | OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion pathopentelemetry · opentelemetry · CWE-770 | Orta5,9 | — | %0,4 | 23 Nis 2026 |
22İzleyin | CVE-2026-45682İstismar yok | OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removalsopentelemetry · ebpf instrumentation · CWE-401 | Orta5,5 | — | %0,2 | 2 Haz 2026 |
22İzleyin | CVE-2026-45676İstismar yok | OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agentopentelemetry · ebpf instrumentation · CWE-20 | Orta5,5 | — | %0,2 | 2 Haz 2026 |
- CVE-2026-4143333İzleyin
OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR
YüksekCVSS 8,4İstismar yokEPSS %0opentelemetry · opentelemetry ebpf instrumentation24 Nis 2026
- CVE-2026-4260232İzleyin
azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay
YüksekCVSS 8,1İstismar yokEPSS %0opentelemetry · opentelemetry collector contrib13 May 2026
- CVE-2026-4219131İzleyin
OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter
YüksekCVSS 7,8İstismar yokEPSS %0opentelemetry · opentelemetry.exporter.opentelemetryprotocol12 May 2026
- CVE-2023-4710830İzleyin
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
YüksekCVSS 7,5Kavram kanıtıEPSS %2opentelemetry · opentelemetry10 Kas 2023
- CVE-2023-4514230İzleyin
OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · opentelemetry12 Eki 2023
- CVE-2024-3612930İzleyin
OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · configgrpc5 Haz 2024
- CVE-2026-2918130İzleyin
OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · opentelemetry7 Nis 2026
- CVE-2023-4381030İzleyin
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · opentelemetry6 Eki 2023
- CVE-2026-4568530İzleyin
OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4567830İzleyin
OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4568630İzleyin
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
YüksekCVSS 7,5İstismar yokEPSS %1opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4490230İzleyin
opentelemetry-js: Prometheus exporter process crash via malformed HTTP request
YüksekCVSS 7,5İstismar yokEPSS %0opentelemetry · opentelemetry\/auto-instrumentations-node27 May 2026
- CVE-2026-4568030İzleyin
OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU
YüksekCVSS 7,5İstismar yokEPSS %0opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4234830İzleyin
OpAMP client reads unbounded HTTP response bodies
YüksekCVSS 7,5İstismar yokEPSS %0opentelemetry · opentelemetry.opamp.client12 May 2026
- CVE-2026-3988329İzleyin
OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking
YüksekCVSS 7,3İstismar yokEPSS %0opentelemetry · opentelemetry8 Nis 2026
- CVE-2026-2405128İzleyin
OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking
YüksekCVSS 7,0İstismar yokEPSS %0opentelemetry · opentelemetry2 Şub 2026
- CVE-2024-4236826İzleyin
open-telemetry has an Observable Timing Discrepancy
OrtaCVSS 6,5İstismar yokEPSS %1open-telemetry · opentelemetry-collector-contrib13 Ağu 2024
- CVE-2026-4567926İzleyin
OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages
OrtaCVSS 6,5İstismar yokEPSS %0opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4018223İzleyin
OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies
OrtaCVSS 5,9İstismar yokEPSS %1opentelemetry · opentelemetry23 Nis 2026
- CVE-2026-4148423İzleyin
OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body
OrtaCVSS 5,9İstismar yokEPSS %0opentelemetry · opentelemetry.exporter.onecollector6 May 2026
- CVE-2026-4568123İzleyin
OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size
OrtaCVSS 5,9İstismar yokEPSS %0opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4148323İzleyin
Unbounded HTTP response body read in OpenTelemetry.Resources.Azure
OrtaCVSS 5,9İstismar yokEPSS %0opentelemetry · opentelemetry.resources.azure6 May 2026
- CVE-2026-4107823İzleyin
OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
OrtaCVSS 5,9İstismar yokEPSS %0opentelemetry · opentelemetry23 Nis 2026
- CVE-2026-4568222İzleyin
OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals
OrtaCVSS 5,5İstismar yokEPSS %0opentelemetry · ebpf instrumentation2 Haz 2026
- CVE-2026-4567622İzleyin
OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent
OrtaCVSS 5,5İstismar yokEPSS %0opentelemetry · ebpf instrumentation2 Haz 2026