Skip to content
Threat Feed

Product

Go/Go.opentelemetry.io/Obi (< 0.9.0)

1 brief RSS
medium advisory

OpenTelemetry eBPF Instrumentation Postgres Parser Vulnerable to Panic via Malformed BIND Payloads (CVE-2026-45678)

The OpenTelemetry eBPF Instrumentation (OBI) Postgres protocol parser is vulnerable to a remote availability issue — when processing BIND messages, the parser assumes payloads contain a valid NUL-terminated portal name; a crafted empty or unterminated payload can cause OBI to slice beyond the end of the captured buffer, triggering a runtime panic and crashing the agent.

go/go.opentelemetry.io/obi denial-of-service postgres ebpf CVE-2026-45678
2r 1t