Количество 12
Количество 12
CVE-2026-42154
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.
CVE-2026-42154
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.
CVE-2026-42154
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.
CVE-2026-42154
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
CVE-2026-42154
Prometheus is an open-source monitoring system and time series databas ...
ROS-20261023-80-0047
Уязвимость golang-github-prometheus
ROS-20261023-73-0046
Уязвимость golang-github-prometheus
GHSA-8rm2-7qqf-34qm
Prometheus: Remote read endpoint allows denial of service via crafted snappy payload
ALT-PU-2026-11726
ALT-PU-2026-11726: package `prometheus` update to version 3.12.0-alt1
RLSA-2026:34359
Important: opentelemetry-collector security update
RLSA-2026:34357
Important: opentelemetry-collector security update
SUSE-SU-2026:2243-1
Security update 5.0.8 for Multi-Linux Manager Client Tools
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-42154 Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-42154 Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-42154 Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-42154 Prometheus: remote read endpoint allows denial of service via crafted snappy payload | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-42154 Prometheus is an open-source monitoring system and time series databas ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | ROS-20261023-80-0047 Уязвимость golang-github-prometheus | CVSS3: 7.5 | 1% Низкий | 9 дней назад |
| ROS-20261023-73-0046 Уязвимость golang-github-prometheus | CVSS3: 7.5 | 1% Низкий | 9 дней назад |
| GHSA-8rm2-7qqf-34qm Prometheus: Remote read endpoint allows denial of service via crafted snappy payload | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-11726 ALT-PU-2026-11726: package `prometheus` update to version 3.12.0-alt1 | CVSS3: 7.5 | 3 месяца назад | |
 | RLSA-2026:34359 Important: opentelemetry-collector security update | 4 месяца назад | ||
| RLSA-2026:34357 Important: opentelemetry-collector security update | 4 месяца назад | ||
 | SUSE-SU-2026:2243-1 Security update 5.0.8 for Multi-Linux Manager Client Tools | 5 месяцев назад |
Уязвимостей на страницу