Skip to content
OpenAdvisories

Package · Go

go.etcd.io/etcd/v3

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-vjg6-93fv-qv64

    Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only

    ### Vulnerability type Logging ### Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regard…

    go.etcd.io/etcd/v3 go.etcd.io/etcd Go
  • Low —
    GHSA-pm3m-32r3-7mfh

    Etcd embed auto compaction retention negative value causing a compaction loop or a crash

    ### Impact Data Validation ### Detail The parseCompactionRetention function in embed/etcd.go allows the retention variable value to be negative and causes the node to execute the history compaction in a loop, taking more CPU than usual and spamming logs. ### …

    go.etcd.io/etcd/v3 go.etcd.io/etcd Go
  • Low —
    GHSA-h8g9-6gvh-5mrc

    etcd vulnerable to TOCTOU of gateway endpoint authentication

    ### Vulnerability type Authentication ### Workarounds Refer to the [gateway documentation](https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/gateway.md). The vulnerability was spotted due to unclear documentation of how the gateway handles en…

    go.etcd.io/etcd/v3 Go