Skip to content
Threat Feed
Subscribe

Product

Etcd (>= 3.6.0, < 3.6.14)

2 briefs RSS
high advisory

etcd Watch API Authorization Bypass via Open-Ended Range Requests

An authorization bypass vulnerability (GHSA-xg4h-6gfc-h4m8) in etcd's Watch API allows an authenticated user with READ permission on a single key to exploit the `clientv3.WithFromKey()` function, gaining unauthorized access to monitor and receive events for all keys lexicographically greater than or equal to their permitted key in clusters with authentication enabled.

etcd +2 authorization-bypass rbac data-collection
3t
medium advisory

etcd TLS Listener Denial of Service Vulnerability

A denial-of-service vulnerability in etcd's TLS listener allows a network attacker to exhaust server memory by spawning unbounded goroutines through multiple TCP connections without sending ClientHello messages, leading to loss of availability for etcd clusters and dependent services like Kubernetes.

etcd +2 denial-of-service kubernetes TLS
1t