Skip to content
OpenAdvisories

Package · Go

go.etcd.io/etcd/v3

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-j86v-2vjr-fg8f

    Etcd Gateway TLS endpoint validation only confirms TCP reachability

    ### Vulnerability type Cryptography ### Workarounds Refer to the [gateway documentation](https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/gateway.md). The vulnerability was spotted due to unclear documentation of how the gateway handles endp…

    go.etcd.io/etcd/v3 go.etcd.io/etcd Go
  • Medium 6.5
    CVE-2020-15106

    Improper Input Validation in etcd

    In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely l…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux Go
  • Medium 6.8
    CVE-2018-16886

    go.etcd.io/etcd Authentication Bypass

    etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) wh…

    The etcd Project etcd: etcd etcd Debian Ubuntu Go