Photon OS 5.0: Etcd PHSA-2026-5.0-91-0975

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0975. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoC Demo Usage Unauthenticated PoC Demo Usage Authenticated PoC Proof-of-Concept exploit for CVE-2018-1002105. The current exploit requires create and get privileges on pods and pods/exec. Support has been added for portforward and attach, which require similar...

CLEANSTART-2026-YF22424 Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GD15300 Security fix for GHSA-259r-337f-4rfw applied in: consul-k8s 1.7.13-ri3, etcd 3.6.14-r1, traefik 3.4.5-r0, traefik 3.7.6-r2, step-cli 0.28.7-r3, thanos 0.42.3-r1, thanos 0.42.3-r2, thanos 0.42.4-r0, nats-server 2.14.3-r0, consul-k8s 1.7.13-r3, grafana 13.0.3-r2, etcd 3.6.13-r1

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IO06062 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

CLEANSTART-2026-QH45046 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the etcd package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

kubetcd

Kubetcd Wrapper of https://github.com/jpbetz/auger. It automates pod deployment by writing directly into etcd. It includes multiple functions for post-exploitation of compromised etcds. Disclaimer !WARNING This is a PoC, do not use it in a production environment. Writing directly to etcd may resu...

CLEANSTART-2026-CL56370 Security fix for GHSA-hfvc-g4fc-pqhx applied in: kube-state-metrics 2.18.0-r2, bank-vaults 1.32.1-r1, etcd 3.6.10-r0, grafana 13.0.0-r0, minio 0.20250907.161309-r3, openbao 2.5.4-r1, velero 1.16.2-r4, argo-cd-fips 3.3.7-r0, temporal-server-fips 1.31.1-r1, kube-state-metrics 2.17.0-r1, cortex 1.21.1-r2, cortex 1.21.1-r3, thanos 0.41.0-r0, fulcio 1.8.7-r2, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, prometheus 3.10.0-r1

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HL19254 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

CLEANSTART-2026-OH06424 Security fix for GHSA-w67g-5rqw-f597 applied in: etcd 3.5.29-r0, prometheus 3.5.3-r11, prometheus 3.5.3-r12, velero 1.16.2-r15, amazon-cloudwatch-agent 1.300073.0-r0, etcd 3.5.33-r1, etcd 3.5.33-r3

GHSA-w67g-5rqw-f597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

RHEL 8 : Red Hat OpenStack Platform 16.2 security advisory (Important) (RHSA-2026:90330)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90330 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

CLEANSTART-2026-MP84668 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

etcd: etcd: Denial of Service via unbounded TLS handshake goroutines

A flaw was found in etcd, a distributed key-value store. A remote attacker can exploit this by opening numerous TCP connections to an etcd TLS listener without completing the TLS handshake. This action causes the tlsListener.acceptLoop to spawn an unbounded number of goroutines, which consume...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

An update for etcd, collectd-sensubility and collectd-libpod-stats is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security advisory

An update for etcd, collectd-sensubility and collectd-libpod-stats is now available for Red Hat OpenStack Platform 17.1 Wallaby for Red Hat Enterprise Linux RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVS...

etcd: etcd: Denial of Service via unbounded TLS handshake goroutines

A flaw was found in etcd, a distributed key-value store. A remote attacker can exploit this by opening numerous TCP connections to an etcd TLS listener without completing the TLS handshake. This action causes the tlsListener.acceptLoop to spawn an unbounded number of goroutines, which consume...

CVE-2026-78669 affecting package etcd for versions less than 3.5.35-1

CVE-2026-78669 affecting package etcd for versions less than 3.5.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78660 affecting package etcd for versions less than 3.5.35-1

CVE-2026-78660 affecting package etcd for versions less than 3.5.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-37236 affecting package etcd for versions less than 3.5.35-1

CVE-2026-37236 affecting package etcd for versions less than 3.5.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78663 affecting package etcd for versions less than 3.5.35-1

CVE-2026-78663 affecting package etcd for versions less than 3.5.35-1. An upgraded version of the package is available that resolves this issue...