https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:20:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06663 bdu:2024-06663 https://cve.radiocsirt.org/vuln/bdu:2024-06663 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 certfr-2024-avi-0878 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 https://cve.radiocsirt.org/vuln/cleanstart-2025-vc45240 <p><strong>Affected:</strong> CleanStart: cert-manager-webhook-pdns-fips</p> <p>Security vulnerability affects the cert-manager-webhook-pdns-fips package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: cert-manager-webhook-pdns-fips</p> <p>Security vulnerability affects the cert-manager-webhook-pdns-fips package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-vc45240 https://cve.radiocsirt.org/vuln/euvd-2026-257052 EUVD-2026-257052 https://cve.radiocsirt.org/vuln/euvd-2026-257052 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47108 <p>OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.</p> <p>OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-47108 https://cve.radiocsirt.org/vuln/ghsa-8pgv-569h-w5rw <p><strong>Affected:</strong> Go: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</p> <p>### Summary</p> <p>The grpc Unary Server Interceptor [opentelemetry-go-contrib/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b07d33f83f76afbe13f53d171d/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go#L327)</p> <p>``` // UnaryServerInterceptor returns a grpc.UnaryServerInterceptor suitable // for use in a grpc.NewServer call. func UnaryServerInterceptor(opts ...Option) grpc.UnaryServerInterceptor { ``` out of the box adds labels</p> <p>- `net.peer.sock.addr` - `net.peer.sock.port`</p> <p>that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent.</p> <p>### Details</p> <p>An attacker can easily flood the peer address and port for requests.</p> <p>### PoC</p> <p>Apply the attached patch to the example and run the client multiple times. Observe how each request will create a unique histogram and how the memory consumption increases during it. ### Impact</p> <p>In order to be affected, the program has to configure a metrics pipeline, use [UnaryServerInterceptor](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b07d33f83f76afbe13f53d171d/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go#L327), and does not filter any client IP address and ports via middleware or proxies, etc.</p> <p>### Others</p> <p>It is similar to already reported vulnerabilities.</p> <p>* [GHSA-rcjv-mgp8-qvmr](https://github.com/open-telemetry/opentelemetry-go-…</p> <p><strong>Affected:</strong> Go: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</p> <p>### Summary</p> <p>The grpc Unary Server Interceptor [opentelemetry-go-contrib/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b07d33f83f76afbe13f53d171d/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go#L327)</p> <p>``` // UnaryServerInterceptor returns a grpc.UnaryServerInterceptor suitable // for use in a grpc.NewServer call. func UnaryServerInterceptor(opts ...Option) grpc.UnaryServerInterceptor { ``` out of the box adds labels</p> <p>- `net.peer.sock.addr` - `net.peer.sock.port`</p> <p>that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent.</p> <p>### Details</p> <p>An attacker can easily flood the peer address and port for requests.</p> <p>### PoC</p> <p>Apply the attached patch to the example and run the client multiple times. Observe how each request will create a unique histogram and how the memory consumption increases during it. ### Impact</p> <p>In order to be affected, the program has to configure a metrics pipeline, use [UnaryServerInterceptor](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b07d33f83f76afbe13f53d171d/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go#L327), and does not filter any client IP address and ports via middleware or proxies, etc.</p> <p>### Others</p> <p>It is similar to already reported vulnerabilities.</p> <p>* [GHSA-rcjv-mgp8-qvmr](https://github.com/open-telemetry/opentelemetry-go-…</p> https://cve.radiocsirt.org/vuln/ghsa-8pgv-569h-w5rw https://cve.radiocsirt.org/vuln/gsd-2023-47108 gsd-2023-47108 https://cve.radiocsirt.org/vuln/gsd-2023-47108 https://cve.radiocsirt.org/vuln/msrc_cve-2023-47108 msrc_CVE-2023-47108 https://cve.radiocsirt.org/vuln/msrc_cve-2023-47108 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13615-1 <p>etcd-3.5.11-1.1 on GA media</p> <p>etcd-3.5.11-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13615-1 https://cve.radiocsirt.org/vuln/rhsa-2023:7197 <p>golang.org/x/net/html: Cross site scripting opentelemetry: DoS vulnerability in otelhttp opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> <p>golang.org/x/net/html: Cross site scripting opentelemetry: DoS vulnerability in otelhttp opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7197 https://cve.radiocsirt.org/vuln/suse-su-2024:3188-1 <p>Security update for containerd</p> <p>Security update for containerd</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3188-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-47108 <p><strong>Affected:</strong> Ubuntu:25.10: golang-opentelemetry-contrib, Ubuntu:26.04:LTS: golang-opentelemetry-contrib</p> <p>OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.</p> <p><strong>Affected:</strong> Ubuntu:25.10: golang-opentelemetry-contrib, Ubuntu:26.04:LTS: golang-opentelemetry-contrib</p> <p>OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server&#39;s potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-47108 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0137 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0137