VDB
BDU%3A2024-05114
BDU%3A2024-05114
PUBLISHED
CVSS 8.199999809265137 HIGH
Уязвимость модулей confighttp и configgrpc программного обеспечения обработки данных телеметрии OpenTelemetry Collector, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| opentelemetry | opentelemetry | 0 |
| OpenTelemetry | configgrpc, confighttp, opentelemetry collector | |
| open-telemetry | opentelemetry-collector | < 0.102.1 |
Timeline
- Jun 5, 2024 CVE Published
- Jul 8, 2024 CVE Updated
- Jun 4, 2025 PoC Published
References
- https://github.com/open-telemetry/opentelemetry-collector/security/advisories/GHSA-c74f-6mfw-mm4v url
- https://github.com/open-telemetry/opentelemetry-collector/pull/10323 url
- https://github.com/open-telemetry/opentelemetry-collector/pull/10289 url
- https://opentelemetry.io/blog/2024/cve-2024-36129/ url
- https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.102.1 advisory
- https://opentelemetry.io/blog/2024/cve-2024-36129 url