etcd vulnerabilities (Debian)
18 vulnerabilities.
-
etcdDebian etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline 8.7 High -
etcdDebian etcd: Watch API authorization bypass via open-ended range requests 7.1 High -
etcdDebian etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation 6.5 Medium -
etcdDebian etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks 0.0 None -
etcdDebian etcd: Authorization bypasses in multiple APIs 8.8 High -
etcdDebian etcd: Nested etcd transactions bypass RBAC authorization checks 0.0 None -
etcdDebian etcd denial of service vulnerability 7.5 High -
etcdDebian etcd key name can be accessed via LeaseTimeToLive API 3.1 Low -
etcdDebian Etcd-io Improper Authentication vulnerability 9.8 Critical -
etcdDebian Improper authentication in etcd 6.5 Medium -
etcdDebian Denial of Service in etcd 7.7 High -
etcdDebian No minimum password length in etcd 5.8 Medium -
etcdDebian Improper Preservation of Permissions in etcd 5.7 Medium -
etcdDebian Improper Input Validation in etcd 6.5 Medium -
etcdDebian Improper Input Validation in etcd 6.5 Medium -
etcdDebian go.etcd.io/etcd Authentication Bypass 6.8 Medium -
etcdDebian DNS Rebinding in etcd 5.5 Medium -
etcdDebian etcd Cross-site Request Forgery (CSRF) 8.8 High