open-telemetry

Records63All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

open-telemetry records in CISA KEV

No open-telemetry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opentelemetry 14 records HIGH Ebpf Instrumentation 10 records HIGH Configgrpc 1 record HIGH Confighttp 1 record HIGH Opentelemetry.api 1 record LOW Opentelemetry.exporter.onecollector 1 record LOW Opentelemetry.exporter.opentelemetryprotocol 1 record LOW Opentelemetry.exporter.zipkin 1 record LOW

Records

1 record in Configgrpc · all components

TI-2024-23957 CVE-2024-36129 · GHSA-c74f-6mfw-mm4v

OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

HIGH 75

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01242 Published 2024-06-05 Partial fix · 0.102.1, 0.102.0 CWE-119

Open these records in search →