67 matches found
CVE-2026-33343
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, an authenticated user with RBAC restricted permissions on key ranges can use nested transactions to bypass all key-level authorization. This allows any authenticated user with...
Linux Distros Unpatched Vulnerability : CVE-2026-33343
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, an authenticated user with RBAC...
Linux Distros Unpatched Vulnerability : CVE-2026-33413
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass...
etcd: Nested etcd transactions bypass RBAC authorization checks
Impact What kind of vulnerability is it? Who is impacted? An authenticated user with RBAC restricted permissions on key ranges can use nested transactions to bypass all key-level authorization. This allows any authenticated user with direct access to etcd to effectively ignore all key range...
MiracleLinux 7 : etcd-3.2.32-1.el7 (AXSA:2021-1717:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1717:01 advisory. etcd: Large slice causes panic in decodeRecord method CVE-2020-15106 etcd: DoS in wal/wal.go CVE-2020-15112 Tenable has extracted the preceding...
Unity Linux 20.1070e Security Update: etcd (UTSA-2025-680591)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680591 advisory. Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. Tenable has extracted the preceding...
EUVD-2023-0749
Malicious code in bioql PyPI...
EUVD-2022-7121
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-16886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control RBAC is used and...
Linux Distros Unpatched Vulnerability : CVE-2020-15106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file a...
TencentOS Server 4: etcd (TSSA-2024:0821)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0821 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2024-51744 affecting package etcd for versions less than 3.5.18-1
CVE-2024-51744 affecting package etcd for versions less than 3.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-45288 affecting package etcd for versions less than 3.5.18-1
CVE-2023-45288 affecting package etcd for versions less than 3.5.18-1. An upgraded version of the package is available that resolves this issue...
openSUSE 15 Security Update : etcd (SUSE-SU-2025:0357-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0357-1 advisory. Security Update to version 3.5.18: Ensure all goroutines created by StartEtcd to exit before closing the errc mvcc: restore tombstone index if it's first...
AZL-52236 CVE-2024-51744 affecting package etcd for versions less than 3.5.21-1
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
etcd-for-k8s1.30-3.5.15-1.1 on GA media (moderate)
etcd-for-k8s1.30-3.5.15-1.1 on GA media Announcement ID: openSUSE-SU-2024:14400-1 Rating: moderate Cross-References: CVE-2023-45288 CVSS scores: CVE-2023-45288 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...
AZL-39484 CVE-2023-45288 affecting package etcd for versions less than 3.5.12-2
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-38281 CVE-2023-45288 affecting package etcd for versions less than 3.5.18-1
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-35563 CVE-2024-24786 affecting package etcd for versions less than 3.5.12-6
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...