1 matches found
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
Impact What kind of vulnerability is it? Who is impacted? A network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. Each connection spawns a goroutine in the etcd server process that blocks indefinitely inside tls.Conn.Handshake, and each is...
8.7CVSS5.8AI score0.00396EPSS
SaveExploits0References8Affected Software1
20