242 matches found
CVE-2024-8975
Technical details about CVE-2024-8975 (Grafana Alloy Unquoted Search Path) are not provided in the connected documents. The initial description offers some context, but no product versions, root cause, or remediation specifics beyond public advisories. Monitor for updates.
CVE-2024-8975 Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
CVE-2024-8975 Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
CVE-2024-8975 Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
Grafana Alloy 安全漏洞
Grafana Alloy is an open source OpenTetry Collector distribution of Grafana Open Source. A security vulnerability exists in Grafana Alloy versions prior to 1.3.3 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...
Grafana Alloy unquoted service path
On a windows machine, the Grafana Alloy service prior to 1.3.3 is vulnerable to a privilege escalation from local user to SYSTEM due to an unquoted service path. It is recommended that you remove the Grafana Alloy installation and do a clean install. An update will not resolve the issue. An...
PT-2024-6558 · Grafana +1 · Grafana Agent +2
Name of the Vulnerable Software and Affected Versions: Grafana Alloy versions prior to 1.3.3 Grafana Alloy versions 1.4.0-rc.0 through 1.4.0-rc.1 Grafana Agent Flow mode version prior to 0.43.3 Description: The issue is related to an Unquoted Search Path or Element vulnerability in Grafana Alloy ...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: neuvector-scanner, k8s-device-plugin, syft, k3s, opentelemetry-collector-contrib, cadvisor, kubernetes, podman, grafana-alloy, grype, buildah, ctop, runc, docker...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: k3s, opentelemetry-collector-contrib, buildah, k8s-device-plugin, podman, runc, neuvector-scanner, cadvisor, neuvector-fips, gosu, neuvector, grafana-alloy-fips, cadvisor-fips, kubernetes, grafana-alloy, cluster-autoscaler, opentelemetry-collector-contrib-fips,...
CVE-2024-45310 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, k8s-device-plugin, syft, k3s, opentelemetry-collector-contrib, cadvisor, kubernetes, podman, grafana-alloy, grype, buildah, ctop, runc, docker...
Stack overflow when parsing specially crafted JSON ABI strings
Affected versions of the alloy-json-abi crate did not properly handle parsing of malformatted JSON ABI strings. The JsonAbi::parse method can be tricked into a stack overflow when processing specially crafted input. This stack overflow can lead to a crash of the application using this crate,...
GHSA-8327-84CJ-8XJM Stack overflow when parsing specially crafted JSON ABI strings
Affected versions of the alloy-json-abi crate did not properly handle parsing of malformatted JSON ABI strings. The JsonAbi::parse method can be tricked into a stack overflow when processing specially crafted input. This stack overflow can lead to a crash of the application using this crate,...
CVE-2024-42368 vulnerabilities
Vulnerabilities for packages: grafana-alloy...
CVE-2024-42368 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, grafana-alloy...
GHSA-RFXF-MF63-CPQV vulnerabilities
Vulnerabilities for packages: grafana-alloy...
GHSA-RFXF-MF63-CPQV vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, grafana-alloy...
RUSTSEC-2024-0362 Stack overflow when parsing specially crafted JSON ABI strings
Affected versions of the alloy-json-abi crate did not properly handle parsing of malformatted JSON ABI strings. The JsonAbi::parse method can be tricked into a stack overflow when processing specially crafted input. This stack overflow can lead to a crash of the application using this crate,...
Stack overflow when parsing specially crafted JSON ABI strings
Affected versions of the alloy-json-abi crate did not properly handle parsing of malformatted JSON ABI strings. The JsonAbi::parse method can be tricked into a stack overflow when processing specially crafted input. This stack overflow can lead to a crash of the application using this crate,...
PT-2024-40916 · Unknown · Alloy-Json-Abi
Name of the Vulnerable Software and Affected Versions: alloy-json-abi versions prior to the version containing commit 4790c47 Description: The issue arises from improper handling of malformatted JSON ABI strings by the alloy-json-abi crate. Specifically, the JsonAbi::parse method can be exploited...
