PT-2026-31450
CVE-2026-39883
·
تاريخ النشر
2026-04-08
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
اسم البرنامج المعرض للخطر والإصدارات المتأثرة
إصدارات OpenTelemetry-Go من 1.15.0 إلى 1.42.0
الوصف
أدى إصلاح مشكلة سابقة إلى تغيير المسار المستخدم لأحد الأوامر، لكنه ترك أمرًا آخر عرضة لهجوم اختطاف المسار (PATH hijacking) على منصات BSD وSolaris. وعلى وجه التحديد، يتم تنفيذ الأمر
kenv بدون مسار مطلق، مما يتيح للمهاجم إمكانية تنفيذ تعليمات برمجية عشوائية في سياق التطبيق. ويحدث هذا عندما لا يكون ملف /etc/hostid موجودًا، وهو أمر شائع في أنظمة FreeBSD. ويتطلب الهجوم وصولًا محليًا إلى النظام. الأمر المعرض للخطر هو `exec.Command(”kenv“, ...).التوصيات
قم بالتحديث إلى الإصدار 1.43.0 أو أحدث.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
GHSA-HFVC-G4FC-PQHX
CLEANSTART-2026-AP10784
CLEANSTART-2026-AP81049
CLEANSTART-2026-AP95632
CLEANSTART-2026-AR14847
CLEANSTART-2026-AR38431
CLEANSTART-2026-AV21509
CLEANSTART-2026-BA41349
CLEANSTART-2026-BB83999
CLEANSTART-2026-BD19566
CLEANSTART-2026-BN28456
CLEANSTART-2026-BS27946
CLEANSTART-2026-BU39038
CLEANSTART-2026-BU65096
CLEANSTART-2026-CB00984
CLEANSTART-2026-CC08450
CLEANSTART-2026-CD13174
CLEANSTART-2026-CI59834
CLEANSTART-2026-CL67452
CLEANSTART-2026-CN27900
CLEANSTART-2026-CN84623
CLEANSTART-2026-CO34001
CLEANSTART-2026-CZ07385
CLEANSTART-2026-DA99134
CLEANSTART-2026-DN70218
CLEANSTART-2026-DR81473
CLEANSTART-2026-DU50032
CLEANSTART-2026-DW32113
CLEANSTART-2026-EF68467
CLEANSTART-2026-EH36582
CLEANSTART-2026-EI06494
CLEANSTART-2026-EL10860
CLEANSTART-2026-EM89202
CLEANSTART-2026-EP10142
CLEANSTART-2026-EP65920
CLEANSTART-2026-EY57242
CLEANSTART-2026-FA95643
CLEANSTART-2026-FB07695
CLEANSTART-2026-FK40318
CLEANSTART-2026-FR69458
CLEANSTART-2026-FT01522
CLEANSTART-2026-FU04414
CLEANSTART-2026-FV86809
CLEANSTART-2026-GB38700
CLEANSTART-2026-GB46352
CLEANSTART-2026-GG06672
CLEANSTART-2026-GN78570
CLEANSTART-2026-GQ12922
CLEANSTART-2026-GY48351
CLEANSTART-2026-HB06257
CLEANSTART-2026-HC15345
CLEANSTART-2026-HE31644
CLEANSTART-2026-HF07497
CLEANSTART-2026-HI18999
CLEANSTART-2026-HI89495
CLEANSTART-2026-HJ35817
CLEANSTART-2026-HK01840
CLEANSTART-2026-HL09755
CLEANSTART-2026-HO16255
CLEANSTART-2026-HR50080
CLEANSTART-2026-HT24978
CLEANSTART-2026-IC09970
CLEANSTART-2026-IS19112
CLEANSTART-2026-JH93057
CLEANSTART-2026-JI93588
CLEANSTART-2026-JK52519
CLEANSTART-2026-JN92182
CLEANSTART-2026-JV26120
CLEANSTART-2026-JY63371
CLEANSTART-2026-JY65496
CLEANSTART-2026-KE88989
CLEANSTART-2026-KF86214
CLEANSTART-2026-KJ58915
CLEANSTART-2026-KJ73757
CLEANSTART-2026-KL41807
CLEANSTART-2026-KO23583
CLEANSTART-2026-KQ31223
CLEANSTART-2026-LM43244
CLEANSTART-2026-LO55919
CLEANSTART-2026-LO63022
CLEANSTART-2026-LT10352
CLEANSTART-2026-LU21824
CLEANSTART-2026-MA24172
CLEANSTART-2026-MC76610
CLEANSTART-2026-MI12470
CLEANSTART-2026-MK41253
CLEANSTART-2026-MO33100
CLEANSTART-2026-MP82813
CLEANSTART-2026-MW24969
CLEANSTART-2026-MW66533
CLEANSTART-2026-MY03287
CLEANSTART-2026-MY68881
CLEANSTART-2026-MZ61768
CLEANSTART-2026-NB83265
CLEANSTART-2026-NG28268
CLEANSTART-2026-NK57336
CLEANSTART-2026-NM43450
CLEANSTART-2026-NS33477
CLEANSTART-2026-NT80635
CLEANSTART-2026-OF37807
CLEANSTART-2026-OF46770
CLEANSTART-2026-OH72236
CLEANSTART-2026-OR40192
CLEANSTART-2026-OU18540
CLEANSTART-2026-PB32291
CLEANSTART-2026-PD78752
CLEANSTART-2026-PE88816
CLEANSTART-2026-PF56679
CLEANSTART-2026-PH23874
CLEANSTART-2026-PM06830
CLEANSTART-2026-PM81907
CLEANSTART-2026-PT56560
CLEANSTART-2026-PX76402
CLEANSTART-2026-PX77651
CLEANSTART-2026-QN07777
CLEANSTART-2026-QO29688
CLEANSTART-2026-QT53274
CLEANSTART-2026-QW08095
CLEANSTART-2026-RE02723
CLEANSTART-2026-RL64341
CLEANSTART-2026-RU97646
CLEANSTART-2026-SH05010
CLEANSTART-2026-SO13464
CLEANSTART-2026-SO47947
CLEANSTART-2026-SP73148
CLEANSTART-2026-TE02851
CLEANSTART-2026-TF52309
CLEANSTART-2026-TO35695
CLEANSTART-2026-TP13569
CLEANSTART-2026-TT42218
CLEANSTART-2026-TY53144
CLEANSTART-2026-UI27816
CLEANSTART-2026-UT70766
CLEANSTART-2026-UV44486
CLEANSTART-2026-UW03847
CLEANSTART-2026-UW08576
CLEANSTART-2026-UX07516
CLEANSTART-2026-UY10441
CLEANSTART-2026-UY68298
CLEANSTART-2026-VD47610
CLEANSTART-2026-VN02574
CLEANSTART-2026-VO98287
CLEANSTART-2026-VT65447
CLEANSTART-2026-VU72808
CLEANSTART-2026-VV82680
CLEANSTART-2026-VZ08395
CLEANSTART-2026-WA14162
CLEANSTART-2026-WB89098
CLEANSTART-2026-WF25734
CLEANSTART-2026-WK17839
CLEANSTART-2026-WL14185
CLEANSTART-2026-WO62988
CLEANSTART-2026-WS85269
CLEANSTART-2026-WT32301
CLEANSTART-2026-WW41817
CLEANSTART-2026-WW53101
CLEANSTART-2026-WY21381
CLEANSTART-2026-XB51326
CLEANSTART-2026-XJ06210
CLEANSTART-2026-XN15507
CLEANSTART-2026-XN33394
CLEANSTART-2026-XO18404
CLEANSTART-2026-XO70994
CLEANSTART-2026-XR35583
CLEANSTART-2026-YA34975
CLEANSTART-2026-YB92538
CLEANSTART-2026-YC32527
CLEANSTART-2026-YE67255
CLEANSTART-2026-YF74364
CLEANSTART-2026-YG71543
CLEANSTART-2026-YH23797
CLEANSTART-2026-YS01797
CLEANSTART-2026-YV44838
CLEANSTART-2026-YX37957
CLEANSTART-2026-YY48565
CLEANSTART-2026-YZ90223
CLEANSTART-2026-ZD29280
CLEANSTART-2026-ZF00349
GO-2026-5426
OPENSUSE-SU-2026:11173-1
OPENSUSE-SU-2026:11494-1
OPENSUSE-SU-2026:21551-1
SUSE-SU-2026:23216-1
SUSE-SU-2026:23227-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المراجع · 964
- https://github.com/open-telemetry/opentelemetry-go⭐ 6573🔗 1495·ملاحظة
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx⭐ 6570🔗 1487·إكسبلويت
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39883.json⭐ 3019🔗 649·إكسبلويت
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PX76402.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PX77651.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TP13569.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KJ73757.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VV82680.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TY53144.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LO55919.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HT24978.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AP81049.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SH05010.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HR50080.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK17839.json⭐ 2·ملاحظة