Security
فارسی
All products

Red Hat Storage 3/etcd

Red Hat · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV recordsCVE-2020-15136 · GHSA-WR2V-9RPQ-C35Q go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd GoRed Hat Medium Fix reported
Etcd Gateway can include itself as an endpoint resulting in resource exhaustionCVE-2020-15114 · GHSA-2XHQ-GV6C-P224 go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd GoRed Hat High Fix reported
etcd has no minimum password lengthCVE-2020-15115 · GHSA-4993-M7G5-R9HH go.etcd.io/etcd/client/v3Red Hat Enterprise Linux 7/etcd GoRed Hat Medium Fix reported
go.etcd.io/etcd Authentication BypassCVE-2018-16886 · GHSA-H6XX-PMXH-3WGPVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat High Fix reported
DNS Rebinding in etcdCVE-2018-1099 · GHSA-WF43-55JJ-VWQ8 go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd3 GoRed Hat Medium Fix reported
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review. github.com/dgrijalva/jwt-go/v4github.com/dgrijalva/jwt-go GoRed Hat High Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 GoRed Hat Medium Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Improper Preservation of Permissions in etcdCVE-2020-15113 · GHSA-CHH6-PPWQ-JH92 github.com/etcd-io/etcdRed Hat Enterprise Linux 7/etcd GoRed Hat Medium Fix reported
etcd Key name can be accessed via LeaseTimeToLive APICVE-2023-32082 · GHSA-3P4G-RCW5-8298 github.com/etcd-io/etcdRed Hat Enterprise Linux 7/etcd3 GoRed Hat Low Fix reported
etcd Cross-site Request Forgery (CSRF)CVE-2018-1098 · GHSA-5GJM-FJ42-X983 go.etcd.io/etcd/v3Red Hat Enterprise Linux 7/etcd3 GoRed Hat High Fix reported