Skip to content
OpenAdvisories
Medium RHSA-2021:1407 2 CVEs

Red Hat Security Advisory: etcd security update

Published Sep 18, 2024 · Updated Mar 27, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 etcd 0:3.2.32-1.el7_9
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 etcd-debuginfo 0:3.2.32-1.el7_9

Vulnerabilities 2

  • Medium 6.5
    CVE-2020-15106

    Improper Input Validation in etcd

    In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely l…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux Go
  • Medium 6.5
    CVE-2020-15112

    Improper Input Validation in etcd

    In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus pa…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1868872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1868883
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1407.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-15106
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-15106
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-15106
  • article
    https://github.com/etcd-io/etcd/security/advisories/GHSA-p4g4-wgrh-qrg2
  • report
    https://access.redhat.com/security/cve/CVE-2020-15112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-15112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-15112
  • article
    https://github.com/etcd-io/etcd/security/advisories/GHSA-m332-53r6-2w93