opentelemetry-collector vulnerabilities (AlmaLinux)
36 vulnerabilities.
-
opentelemetry-collectorAlmaLinux Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
opentelemetry-collectorAlmaLinux Reject malformed ECH outer extension references in crypto/tls 7.5 High -
opentelemetry-collectorAlmaLinux Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart 7.5 High -
opentelemetry-collectorAlmaLinux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
opentelemetry-collectorAlmaLinux Lack of limit on size of parsed Range headers in net/http 7.5 High -
opentelemetry-collectorAlmaLinux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
opentelemetry-collectorAlmaLinux Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
opentelemetry-collectorAlmaLinux Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
opentelemetry-collectorAlmaLinux Add recursion depth guard during decode in encoding/xml 7.5 High -
opentelemetry-collectorAlmaLinux Fix Javascript regexp context tracking in html/template 6.1 Medium -
opentelemetry-collectorAlmaLinux Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
opentelemetry-collectorAlmaLinux Enforce maximum recursion depth in encoding/asn1 7.5 High -
opentelemetry-collectorAlmaLinux Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
opentelemetry-collectorAlmaLinux Inefficient candidate hostname parsing in crypto/x509 6.5 Medium -
opentelemetry-collectorAlmaLinux OpenTelemetry-Go's baggage parsing no longer caps raw header length 5.3 Medium -
opentelemetry-collectorAlmaLinux Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
opentelemetry-collectorAlmaLinux Quadratic string concatenation in consumePhrase in net/mail 7.5 High -
opentelemetry-collectorAlmaLinux Quadratic string concatentation in consumeComment in net/mail 7.5 High -
opentelemetry-collectorAlmaLinux Crash when handling long CNAME response in net 7.5 High -
opentelemetry-collectorAlmaLinux Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
opentelemetry-collectorAlmaLinux Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
opentelemetry-collectorAlmaLinux Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
opentelemetry-collectorAlmaLinux Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
opentelemetry-collectorAlmaLinux TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
opentelemetry-collectorAlmaLinux Inefficient policy validation in crypto/x509 7.5 High -
opentelemetry-collectorAlmaLinux Unexpected work during chain building in crypto/x509 7.5 High -
opentelemetry-collectorAlmaLinux Go JOSE affect by a panic in JWE decryption 7.5 High -
opentelemetry-collectorAlmaLinux gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
opentelemetry-collectorAlmaLinux Incorrect parsing of IPv6 host literals in net/url 7.5 High -
opentelemetry-collectorAlmaLinux Unexpected session resumption in crypto/tls 10.0 Critical -
opentelemetry-collectorAlmaLinux Memory exhaustion in query parameter parsing in net/url 7.5 High -
opentelemetry-collectorAlmaLinux Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
opentelemetry-collectorAlmaLinux Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
opentelemetry-collectorAlmaLinux Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
opentelemetry-collectorAlmaLinux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
opentelemetry-collectorAlmaLinux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical