Lucene search
PRIOn knowledge basePRION:CVE-2020-15106HistoryAug 05, 2020 - 7:15 p.m.
Design/Logic Flaw
2020-08-0519:15:00
PRIOn knowledge base
www.prio-n.com
8
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.
Related
gitlab
gitlab
Improper Input Validation in etcd
2023-02-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 06:19:36
Denial Of Service (DoS)
2021-03-18 06:52:10
cve
cve
CVE-2020-15106
2020-08-05 19:15:10
github
github
Panic due to malformed WALs in go.etcd.io/etcd
2023-02-07 22:59:30
nvd
nvd
CVE-2020-15106
2020-08-05 19:15:10
cgr
cgr
CVE-2020-15106 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2020-15106 affecting package etcd for versions less than 3.5.0-3
2022-04-09 06:52:04
debiancve
debiancve
CVE-2020-15106
2020-08-05 19:15:10
redhatcve
redhatcve
CVE-2020-15106
2020-08-14 06:43:31
ubuntucve
ubuntucve
CVE-2020-15106
2020-08-05 00:00:00
cvelist
cvelist
CVE-2020-15106 Improper Input Validation in etcd
2020-08-05 19:05:13
wolfi
wolfi
CVE-2020-15106 vulnerabilities
2024-07-05 21:08:40
osv
osv
Panic due to malformed WALs in go.etcd.io/etcd
2023-02-07 22:59:30
BIT-etcd-2020-15112
2024-03-06 10:52:31
CVE-2020-15112
2020-08-05 20:15:14
nessus
nessus
RHEL 7 : etcd (RHSA-2021:1407)
2021-04-27 00:00:00
Ubuntu 18.04 ESM : etcd vulnerabilities (USN-5628-2)
2023-10-16 00:00:00
Ubuntu 20.04 LTS : etcd vulnerabilities (USN-5628-1)
2022-09-22 00:00:00
redhat
redhat
(RHSA-2021:1407) Moderate: etcd security update
2021-04-27 16:05:53
ibm
ibm
Security Bulletin: IBM Cloud Private is vulnerable to etcd vulnerabilities (CVE-2020-15106, CVE-2020-15112, CVE-2020-15113)
2021-02-26 14:21:09
Security Bulletin: IBM API Connect is vulnerable to denial of service (DoS) via etcd (CVE-2020-15106 CVE-2020-15112 CVE-2020-15113)
2021-02-02 13:37:27
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:36:46
openvas
openvas
Ubuntu: Security Advisory (USN-5628-1)
2022-09-23 00:00:00
Ubuntu: Security Advisory (USN-5628-2)
2023-01-27 00:00:00
etcd < 3.3.23, 3.4.x < 3.4.10 Multiple Vulnerabilities
2020-08-10 00:00:00
ubuntu
ubuntu
etcd vulnerabilities
2022-09-22 00:00:00
etcd vulnerabilities
2022-09-22 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0130
2020-08-25 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0130
2020-08-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1
2020-09-05 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: etcd-3.4.13-1.fc32
2021-01-04 01:18:15