AIKIDO-2024-10338

datadog/dd-trace is vulnerable to DoS possible due to memory leak or race condition

49

Medium

datadog/dd-trace php

AIKIDO-2024-10338: datadog/dd-trace is vulnerable to DoS possible due to memory leak or race condition in versions 0.1.0 - 1.3.2.

DoS possible due to memory leak or race condition
Vuln in 0.1.0 - 1.3.2
Fixed in 1.4.0
No CVE available
TL;DR

Affected versions of the package are vulnerable to DoS possible due to memory leaks or race conditions on several locations in the code base.

Who does this affect?

You're affected if you are using a version which is within vulnerability ranges.

How can it be fixed?

Upgrade datadog/dd-trace library to patch version.

Background info

Link to vendor website

Are you
to these issues?
Connect your GitHub, GitLab, Bitbucket or Azure DevOps account to start scanning your repos for free.
Start For Free
Your data won't be shared · Read-only access
Logo
© 2024 Aikido Security BV | BE0792914919
🇪🇺 Grauwpoort 1, 9000 Ghent, Belgium
🇺🇸 95 Third St, 2nd Fl, San Francisco, CA 94103, US