Red Hat Enterprise Linux 7/etcd

Red Hat · Package

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV recordsCVE-2020-15136 · GHSA-WR2V-9RPQ-C35Q	go.etcd.io/etcd Red Hat Enterprise Linux 7/etcd	GoRed Hat	Medium	Fix reported	2026-09-10
Etcd Gateway can include itself as an endpoint resulting in resource exhaustionCVE-2020-15114 · GHSA-2XHQ-GV6C-P224	go.etcd.io/etcd Red Hat Enterprise Linux 7/etcd	GoRed Hat	High	Fix reported	2026-09-10
etcd has no minimum password lengthCVE-2020-15115 · GHSA-4993-M7G5-R9HH	go.etcd.io/etcd/client/v3 Red Hat Enterprise Linux 7/etcd	GoRed Hat	Medium	Fix reported	2026-09-10
DNS Rebinding in etcdCVE-2018-1099 · GHSA-WF43-55JJ-VWQ8	go.etcd.io/etcd Red Hat Enterprise Linux 7/etcd3	GoRed Hat	Medium	Fix reported	2026-09-10
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review.	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-02-04
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Improper Preservation of Permissions in etcdCVE-2020-15113 · GHSA-CHH6-PPWQ-JH92	github.com/etcd-io/etcd Red Hat Enterprise Linux 7/etcd	GoRed Hat	Medium	Fix reported	2024-01-31
etcd Key name can be accessed via LeaseTimeToLive APICVE-2023-32082 · GHSA-3P4G-RCW5-8298	github.com/etcd-io/etcd Red Hat Enterprise Linux 7/etcd3	GoRed Hat	Low	Fix reported	2023-11-11
etcd Cross-site Request Forgery (CSRF)CVE-2018-1098 · GHSA-5GJM-FJ42-X983	go.etcd.io/etcd/v3 Red Hat Enterprise Linux 7/etcd3	GoRed Hat	High	Fix reported	2023-11-08
Etcd-io Improper Authentication vulnerabilityCVE-2021-28235 · GHSA-GMPH-WF7J-9GCM	go.etcd.io/etcd/v3 Logging Subsystem for Red Hat OpenShift/openshift-logging/lokistack-gateway-rhel8	GoRed Hat	Critical	No fix reported	2023-04-12
etcd: remote DoS via PageWriter.writeCVE-2022-34038	Red Hat Enterprise Linux 7/etcd Red Hat OpenStack Platform 16.1/etcd	Red Hat	Medium	No fix reported	Not recorded