CyberRota Analysis
AI-GeneratedThe OpenTelemetry eBPF Profiler, specifically versions 0.0.202527 through 0.0.202621, is vulnerable to a denial of service attack where an unprivileged process can indefinitely block the profiler by opening a nonregular mapping file. This vulnerability can disrupt ELF analysis, impacting application performance and reliability. Organizations using affected versions should prioritize upgrading to version 0.0.202622 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages. Starting in version 0.0.202527 and prior to version 0.0.202622, an unprivileged process can cause the profiler to open a nonregular mapping file, such as a FIFO, and block indefinitely, preventing further ELF analysis and causing a denial of service. Version 0.0.202622 contains a patch. No known workarounds are available.