Improper input validation in Red Hat etcd
Priority LOW 25CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 3 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
Why it matters now
EPSS 0.00495 42nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial go.etcd.io/etcd (Go): 3.4.0Red Hat: 3 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | etcd | up to 3.3.1 | — | No fix listed | CNA |
| — | go.etcd.io/etcd (Go) | before 3.4.0 | 3.4.0 | Patch available | GHSA-wf43-55jj-vwq8 |
- etcd VendorRed Hat Affected up to 3.3.1 Fixed in — No fix listed CNA
- go.etcd.io/etcd (Go) Vendor— Affected before 3.4.0 Fixed in 3.4.0 Patch available GHSA-wf43-55jj-vwq8
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:etcd:*:*:*:*:*:*:*:* | up to 3.3.1 | Vulnerable | Red Hat |
| cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* | 30 | Vulnerable | Fedoraproject |
- cpe:2.3:a:redhat:etcd:*:*:*:*:*:*:*:* Versions up to 3.3.1 Vulnerable ·Red Hat
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
Remediation
- Fix · GHSA-wf43-55jj-vwq8 go.etcd.io/etcd (Go) Fixed in 3.4.0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Enterprise 3 | Affected | No fix yet |
| Red Hat Storage 3 | Affected | No fix planned: Will not fix |
Timeline
- 2026-10-02 Threatist record created from CVE-2018-1099
- 2026-10-03 Alias added: GHSA-wf43-55jj-vwq8
References
Advisory 3
More Red Hat Etcd vulnerabilities
- TI-2018-01017 Cross-site request forgery in Red Hat etcd CVSS 3.0HIGH 8.8
- TI-2020-11890 No minimum password length in etcd CVSS 3.1HIGH 7.5
- TI-2020-11889 Denial of Service in etcd CVSS 3.1HIGH 7.7
- TI-2020-11909 Improper authentication in etcd CVSS 3.1MEDIUM 6.5
Sources
- CVE-2018-1099 · CVE Program
- CVE-2018-1099 · NVD
- FIRST EPSS
- GHSA-wf43-55jj-vwq8 · GitHub Advisory Database · CC BY 4.0
- CVE-2018-1099 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences