Skip to content
OpenAdvisories
Medium RHSA-2019:1352 1 CVE

Red Hat Security Advisory: etcd security, bug fix, and enhancement update

Published Sep 18, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 etcd 0:3.2.26-1.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 etcd-debuginfo 0:3.2.26-1.el7

Vulnerabilities 1

  • Medium 6.8
    CVE-2018-16886

    go.etcd.io/etcd Authentication Bypass

    etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) wh…

    The etcd Project etcd: etcd etcd Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1651034
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1676902
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1352.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16886
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16886
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16886