1050 matches found
poc_CVE-2018-1002105
CVE-2018-1002105 PoC Authenticated PoC Demo Usage Unauthenticated PoC Demo Usage Authenticated PoC Proof-of-Concept exploit for CVE-2018-1002105. The current exploit requires create and get privileges on pods and pods/exec. Support has been added for portforward and attach, which require similar...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: etcd: etcd-3.7.2-0.2.hum1 aarch64, s390x, x8664 etcd-3.7.2-0.2.hum1.src src...
AZL-107378 CVE-2026-97032 affecting package etcd 3.5.33-1
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107369 CVE-2026-78669 affecting package etcd 3.5.33-1
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107372 CVE-2026-78660 affecting package etcd 3.5.33-1
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107375 CVE-2026-78659 affecting package etcd 3.5.33-1
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107366 CVE-2026-78663 affecting package etcd 3.5.33-1
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
kubetcd
Kubetcd Wrapper of https://github.com/jpbetz/auger. It automates pod deployment by writing directly into etcd. It includes multiple functions for post-exploitation of compromised etcds. Disclaimer !WARNING This is a PoC, do not use it in a production environment. Writing directly to etcd may resu...
CLEANSTART-2026-CG80075 etcd is a distributed key-value store for the data of a distributed system
CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
CVE-2026-84304 affecting package etcd for versions less than 3.5.34-1
CVE-2026-84304 affecting package etcd for versions less than 3.5.34-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-84445 affecting package etcd for versions less than 3.5.34-1
CVE-2026-84445 affecting package etcd for versions less than 3.5.34-1. An upgraded version of the package is available that resolves this issue...
CLEANSTART-2026-MV90094 etcd is a distributed key-value store for the data of a distributed system
CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
CLEANSTART-2026-TI06135 etcd is a distributed key-value store for the data of a distributed system
Security vulnerability affects the grafana-alloy package. etcd is a distributed key-value store for the data of a distributed system...
CLEANSTART-2026-IC69892 etcd is a distributed key-value store for the data of a distributed system
Security vulnerability affects the loki package. etcd is a distributed key-value store for the data of a distributed system...
The vulnerability of the RBAC authorization verification mechanism when processing transactions for Configurable Storage Parameter Store Etcd allows a perpetrator to disclose sensitive information that is protected by this mechanism.
The vulnerability of the RBAC authorization verification mechanism when processing configuration store transactions involving Etcd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this...
The vulnerability of the RBAC permission checking mechanism when processing embedded transactions for Etcd configuration stores allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
The vulnerability of the authorization verification mechanism for gRPC APIs of Etcd storage servers allows attackers to circumvent security restrictions.
The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...
CLEANSTART-2026-AZ15466 etcd is a distributed key-value store for the data of a distributed system
Security vulnerability affects the cortex package. etcd is a distributed key-value store for the data of a distributed system...
