Lucene search
Veracode Vulnerability DatabaseVERACODE:39196HistoryFeb 10, 2023 - 9:48 a.m.
Denial Of Service (DoS)
2023-02-1009:48:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
vulnerability memory allocations application crash security
0.001 Low
EPSS
Percentile
36.4%
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is vulnerable to Denial of Service (DoS). The vulnerability exists in ServeHTTP function in http.go due to increased memory allocations in metrics instruments causing an application crash.
References
github.com/open-telemetry/opentelemetry-go-contrib/commit/4700605c95230010289f1915aca62a82c60cad3e
github.com/open-telemetry/opentelemetry-go-contrib/pull/3182
github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
Related
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
redhatcve
redhatcve
CVE-2023-25151
2023-02-22 01:31:22
nvd
nvd
CVE-2023-25151
2023-02-08 20:15:24
ubuntucve
ubuntucve
CVE-2023-25151
2023-02-08 00:00:00
gitlab
gitlab
Uncontrolled Resource Consumption
2023-02-08 00:00:00
Uncontrolled Resource Consumption
2023-02-08 00:00:00
cve
cve
CVE-2023-25151
2023-02-08 20:15:24
cvelist
cvelist
github
github
otelhttp and otelbeego have DoS vulnerability for high cardinality metrics
2023-02-08 22:32:16
osv
osv
CVE-2022-21698
2022-02-15 16:15:08
Uncontrolled resource consumption in github.com/prometheus/client_golang
2022-07-15 23:29:02