CVE-2023-45142
14 advisories.
Go/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace CVE-2023-45142: high 7.5, EPSS 1.61%
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-rcjv-mgp8-qvmr#Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
- https://github.com/advisories/GHSA-cg3q-j54f-5p7p
- https://github.com/open-telemetry/opentelemetry-go-contrib
- https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
- https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
- https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
- https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON
Go/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp CVE-2023-45142: unknown, EPSS 1.61%
Memory exhaustion in go.opentelemetry.io/contrib/instrumentation
Action: Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 or later.
go get go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GO-2023-2113#Go/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
- https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
CVE-2023-45142 · published · modified · JSON