Skip to content
OpenAdvisories

Package · Go

go.etcd.io/etcd

12 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    etcd: Authorization bypasses in multiple APIs

    etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API …

  • High 7.7

    Denial of Service in etcd

    In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint c…