go.etcd.io/etcd/v3 vulnerabilities (Go)
14 vulnerabilities.
-
go.etcd.io/etcd/v3Go etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline 8.7 High -
go.etcd.io/etcd/v3Go etcd: Watch API authorization bypass via open-ended range requests 7.1 High -
go.etcd.io/etcd/v3Go etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks 0.0 None -
go.etcd.io/etcd/v3Go etcd: Authorization bypasses in multiple APIs 8.8 High -
go.etcd.io/etcd/v3Go etcd: Nested etcd transactions bypass RBAC authorization checks 0.0 None -
go.etcd.io/etcd/v3Go Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only No score -
go.etcd.io/etcd/v3Go Etcd embed auto compaction retention negative value causing a compaction loop or a crash No score -
go.etcd.io/etcd/v3Go Etcd Gateway TLS endpoint validation only confirms TCP reachability No score -
go.etcd.io/etcd/v3Go Etcd-io Improper Authentication vulnerability 9.8 Critical -
go.etcd.io/etcd/v3Go etcd vulnerable to TOCTOU of gateway endpoint authentication No score -
go.etcd.io/etcd/v3Go Improper Input Validation in etcd 6.5 Medium -
go.etcd.io/etcd/v3Go Improper Input Validation in etcd 6.5 Medium -
go.etcd.io/etcd/v3Go go.etcd.io/etcd Authentication Bypass 6.8 Medium -
go.etcd.io/etcd/v3Go etcd Cross-site Request Forgery (CSRF) 8.8 High