Skip to content
OpenAdvisories

Package · Go

go.etcd.io/etcd

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-vjg6-93fv-qv64

    Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only

    ### Vulnerability type Logging ### Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regard…

    go.etcd.io/etcd/v3 go.etcd.io/etcd Go
  • Low —
    GHSA-pm3m-32r3-7mfh

    Etcd embed auto compaction retention negative value causing a compaction loop or a crash

    ### Impact Data Validation ### Detail The parseCompactionRetention function in embed/etcd.go allows the retention variable value to be negative and causes the node to execute the history compaction in a loop, taking more CPU than usual and spamming logs. ### …

    go.etcd.io/etcd/v3 go.etcd.io/etcd Go
  • Low —
    GHSA-5x4g-q5rc-36jp

    Etcd pkg Insecure ciphers are allowed by default

    ### Vulnerability type Cryptography ### Detail The TLS ciphers list supported by etcd contains insecure cipher suites. Users can configure the desired ciphers using the “--cipher-suites” flag, and a default list of secure cipher suites is used if empty. ### W…

    go.etcd.io/etcd go.etcd.io/etcd/client/pkg/v3 Go