Grafana Tempo Denial-of-Service Vulnerability Due to Large Memory Allocations

A denial-of-service vulnerability has been identified in Grafana Tempo. When queries are made with large limits, they can cause significant memory allocations that impact the service's availability. This issue depends on the deployment strategy of the service. The vulnerability can be mitigated by setting a maximum result limit in the search configuration, such as 262,144.

Impact

Exploitation of this vulnerability can lead to increased memory usage, causing availability issues for the Grafana Tempo service.

Remediation

To address this vulnerability, set the max_result_limit parameter in the search configuration to a value such as 262,144.