Описание
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.
A flaw was found in Grafana. A remote attacker with authenticated access to a SQL datasource can exploit a vulnerability in the $__timeGroup macro. By sending specially crafted queries, an attacker can cause an Out of Memory (OOM) error, leading to the Grafana server crashing and resulting in a Denial of Service (DoS). This can disrupt the availability of the Grafana instance.
Отчет
A moderate severity denial of service flaw was found in Grafana. A remote attacker with authenticated access to a Grafana instance that has a SQL data source configured can send specially crafted queries that abuse the $__timeGroup macro to exhaust memory on the server, causing an out-of-memory (OOM) crash that disrupts the availability of the Grafana instance. Exploitation requires valid credentials and a configured SQL data source, and the attack can take upwards of half an hour to crash the server, so the practical impact is reduced on deployments configured to automatically restart the service. This issue affects the grafana12.4, grafana13.1, and grafana13.2 components shipped in Red Hat Hardened Images (hummingbird-1), where a fix is being pursued; the hi/grafana container image distributed for hummingbird-1 is not affected because the vulnerable component is not present. Red Hat rates this flaw Moderate (CVSS 6.5, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), consistent with the upstream Medium severity rating.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | hi/grafana | Not affected | ||
| Red Hat Hardened Images | grafana13-1-main-13.1.6-0.1.hum1 | Fixed | RHSA-2026:68767 | 17.09.2026 |
| Red Hat Hardened Images | grafana13-2-main-13.2.1-0.5.hum1 | Fixed | RHSA-2026:68778 | 17.09.2026 |
| Red Hat Hardened Images | grafana12-4-main-12.4.10-0.6.hum1 | Fixed | RHSA-2026:68821 | 18.09.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.
Using the $__timeGroup macro, one can achieve an OOM by overloading th ...
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.
Уязвимость встроенного макроса $__timeGroup платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3