Summary
It was discovered that etcd leaked credentials when debugging
was enabled. This allowed remote attackers to discover etcd
authentication credentials and possibly escalate privileges on
systems using etcd.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | etcd | 3.2.17+dfsg-1ubuntu0.1+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | etcd | 3.2.26+dfsg-6ubuntu0.2+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | etcd | 3.3.25+dfsg-7ubuntu0.22.04.1+esm1 |
Vulnerabilities 1
-
Critical 9.8CVE-2021-28235 Public exploit
Etcd-io Improper Authentication vulnerability
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
References
-
report
https://ubuntu.com/security/CVE-2021-28235