一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-45678 [HIGH] – OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetr

未分类
📑 文章目录

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond the end of the captured buffer and panic. This issue has been patched in version 0.9.0.