Uncontrolled Resource Consumption in promhttp

🗓️ 08 Nov 2023 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 2 Views

Microsoft reports uncontrolled resource consumption in the promhttp library.

Reporter	Title	Published	Views	Family All 1523
IBM Security Bulletins	Security Bulletin: CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard	29 Mar 202319:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022	20 Jun 202213:10	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Denial of Service in IBM Storage Defender - Data Protect	11 Nov 202417:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion is vulnerable to denial of server, and security bypass due to Golang vulnerabilities.	13 May 202418:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, go and apr-util	16 Jun 202304:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2023-39325, CVE-2022-21698)	3 Jul 202509:34	–	ibm

Vulners

Node

microsoft cbl2_moby-engine_20.10.27-4Range<20.10.27-3

OR

microsoft cbl2_application-gateway-kubernetes-ingress_1.4.0-25Range<1.4.0-17

OR

microsoft cbl2_cri-o_1.22.3-14Range<1.21.7-2

OR

microsoft azl3_prometheus-process-exporter_0.7.10-15Range<0.8.2-1

OR

microsoft azl3_node-problem-detector_0.8.10-18Range<0.8.15-1

OR

microsoft azl3_multus_3.8-13Range<4.0.2-1

OR

microsoft azl3_moby-engine_20.10.25-3Range<25.0.3-1

OR

microsoft azl3_keda_2.4.0-15Range<2.14.0-1

OR

microsoft cbl2_rook_1.6.2-26Range<1.6.2-18

OR

microsoft cbl2_prometheus-node-exporter_1.3.1-26Range<1.3.1-23

OR

microsoft cbl2_node-problem-detector_0.8.10-20Range<0.8.10-19

OR

microsoft cbl2_local-path-provisioner_0.0.21-18Range<0.0.21-14

OR

microsoft cbl2_kube-vip-cloud-provider_0.0.2-22Range<0.0.2-14

OR

microsoft azl3_application-gateway-kubernetes-ingress_1.7.2-3Range<1.7.2-2

OR

microsoft cbl2_prometheus-process-exporter_0.7.10-21Range<0.7.10-18

OR

microsoft cbl2_nmi_1.8.7-15Range<1.8.11-2

OR

microsoft cbl2_moby-engine_20.10.27-4Range<20.10.27-3

OR

microsoft cbl2_moby-cli_20.10.27-5Range<20.10.27-5

OR

microsoft cbl2_moby-buildx_0.7.1-24Range<0.7.1-16

OR

microsoft cbl2_application-gateway-kubernetes-ingress_1.4.0-25Range<1.4.0-17

OR

microsoft azl3_application-gateway-kubernetes-ingress_1.7.2-2Range<1.7.2-2

OR

microsoft azl3_keda_2.14.0-1Range<2.14.0-1

OR

microsoft azl3_moby-engine_25.0.3-1Range<25.0.3-1

OR

microsoft azl3_multus_4.0.2-1Range<4.0.2-1

OR

microsoft azl3_node-problem-detector_0.8.15-1Range<0.8.15-1

OR

microsoft azl3_prometheus-process-exporter_0.8.2-1Range<0.8.2-1

18 Feb 2026 11:19Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.00376

SSVC

Microsoft promhttp library resource consumption security issue