CVE-2023-47108
Summary
| CVE | CVE-2023-47108 |
| State | RESERVED |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-11-10 19:15:00 UTC |
| Updated | 2023-11-20 19:34:00 UTC |
| Description | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| otelgrpc: Remove high cardinality metric attributes by MadVikingGod · Pull Request #4322 · open-telemetry/opentelemetry-go-contrib · GitHub |
|
github.com |
|
| otelgrpc: Remove high cardinality metric attributes (#4322) · open-telemetry/opentelemetry-go-contrib@b44dfc9 · GitHub |
|
github.com |
|
| DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics · Advisory · open-telemetry/opentelemetry-go-contrib · GitHub |
|
github.com |
|
| noop package - go.opentelemetry.io/otel/metric/noop - Go Packages |
|
pkg.go.dev |
|
| github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/... |
|
github.com |
|
| github.com/open-telemetry/opentelemetry-go-contrib/blob/9d4eb7e7706038b0... |
|
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 242717 Red Hat OpenShift Container Platform 4.14 Security Update (RHSA-2024:0207)
- 242740 Red Hat OpenShift Container Platform 4.13 Security Update (RHSA-2024:0288)
- 242815 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2024:0489)
- 357323 Amazon Linux Security Advisory for containerd : ALAS2ECS-2024-035
- 770221 Red Hat OpenShift Container Platform 4.14 Security Update (RHSA-2024:0207)
- 770225 Red Hat OpenShift Container Platform 4.13 Security Update (RHSA-2024:0288)
- 770227 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2024:0489)
- 907694 Common Base Linux Mariner (CBL-Mariner) Security Update for moby-containerd-cc (31896)
- 907727 Common Base Linux Mariner (CBL-Mariner) Security Update for moby-containerd-cc (31896-1)
- 995916 GO (Go) Security Update for go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (GHSA-8pgv-569h-w5rw)