AZL-35434 CVE-2023-47108 affecting package docker-buildx for versions less than 0.14.0-1

🗓️ 10 Nov 2023 19:15:16Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2023-47108 affects docker-buildx <0.14.0-1; OpenTelemetry-Go Contrib before 0.46.0 leaks peer address in grpc metrics.

Reporter	Title	Published	Views	Family All 213
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Allocation of Resources Without Limits or Throttling in Grafana (CVE-2023-47108)	7 Jul 202517:07	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenTelemetry gRPC, IBM CICS TX Standard is vulnerable to an Denial of Service vulnerability (CVE-2023-47108).	11 Mar 202414:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to denial of service due to OpenTelemetry go module ( CVE-2023-45142, CVE-2023-47108 )	20 Mar 202417:49	–	ibm
Tenable Nessus	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2024-498)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2024-499)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2024-697)	6 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2424)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd (ALASDOCKER-2024-037)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd (ALASDOCKER-2024-041)	17 Aug 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-47108

21 Apr 2026 04:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.04299