etcd vulnerabilities (Ubuntu)
17 vulnerabilities.
-
etcdUbuntu etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline 8.7 High -
etcdUbuntu etcd: Watch API authorization bypass via open-ended range requests 7.1 High -
etcdUbuntu etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation 6.5 Medium -
etcdUbuntu etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks 0.0 None -
etcdUbuntu etcd: Authorization bypasses in multiple APIs 8.8 High -
etcdUbuntu etcd: Nested etcd transactions bypass RBAC authorization checks 0.0 None -
etcdUbuntu etcd key name can be accessed via LeaseTimeToLive API 3.1 Low -
etcdUbuntu Etcd-io Improper Authentication vulnerability 9.8 Critical -
etcdUbuntu Improper authentication in etcd 6.5 Medium -
etcdUbuntu Denial of Service in etcd 7.7 High -
etcdUbuntu No minimum password length in etcd 5.8 Medium -
etcdUbuntu Improper Preservation of Permissions in etcd 5.7 Medium -
etcdUbuntu Improper Input Validation in etcd 6.5 Medium -
etcdUbuntu Improper Input Validation in etcd 6.5 Medium -
etcdUbuntu go.etcd.io/etcd Authentication Bypass 6.8 Medium -
etcdUbuntu DNS Rebinding in etcd 5.5 Medium -
etcdUbuntu etcd Cross-site Request Forgery (CSRF) 8.8 High