CVE-2020-15112

CVE-2020-15112 affects etcd before versions 3.3.23 and 3.4.10. In the WAL path (wal/wal.go) the ReadAll method can encounter an entry index greater than the number of entries, which can cause a runtime panic when WAL entries are read during consensus. This is tied to an entry index validation iss...

CVE-2020-15112

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime...

CVE-2020-15112: Improper Input Validation

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime...

PT-2018-14219 · Google · Html Package

Name of the Vulnerable Software and Affected Versions: html package aka x/net/html versions through 2018-09-25 Description: The issue is related to the html package mishandling certain HTML inputs, such as , leading to a "panic: runtime error" index out of range in nodeStack.pop or...

PT-2018-13922 · Google · X/Net/Html

Name of the Vulnerable Software and Affected Versions: html package aka x/net/html through 2018-09-17 Description: The issue arises from the mishandling of specific HTML tags, such as , which can cause a "panic: runtime error" in the parseCurrentToken function within parse.go during an html.Parse...