go.opentelemetry.io/obi vulnerabilities (Go)
11 vulnerabilities.
-
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI 7.5 High -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages 7.5 High -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers 4.9 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals 5.1 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure 3.8 Low -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size 5.9 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU 5.9 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads 7.5 High -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages 6.5 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent 5.5 Medium -
go.opentelemetry.io/obiGo OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR 8.4 High