Red Hat Security Advisory

RHSA-2021:1407

etcd security update

Released 2021-04-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras etcd-3.2.32-1.el7_9

Fixes 2 records

TI-2020-11887 CVE-2020-15112 · GHSA-m332-53r6-2w93

Improper Input Validation in etcd

LOW 31

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01256 Published 2020-08-05 Partial fix · 3.3.23, 3.4.10 CWE-20

TI-2020-11881 CVE-2020-15106 · GHSA-p4g4-wgrh-qrg2

Improper Input Validation in etcd

LOW 31

In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01256 Published 2020-08-05 Partial fix · 3.3.23, 3.4.10 +1 CWE-20