Skip to content
OpenAdvisories

Package · Go

github.com/etcd-io/etcd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.1
    CVE-2023-32082

    etcd key name can be accessed via LeaseTimeToLive API

    etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read p…

    etcd-io etcd etcd etcd Debian Ubuntu Go
  • Medium 5.7
    CVE-2020-15113

    Improper Preservation of Permissions in etcd

    In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (7…

    etcd-io etcd etcd etcd Debian Ubuntu Go