Lucene search
Redhat.comRH:CVE-2020-15106HistoryAug 14, 2020 - 6:43 a.m.
CVE-2020-15106
2020-08-1406:43:31
redhat.com
access.redhat.com
19
0.001 Low
EPSS
Percentile
36.3%
A flaw was found In etcd, where a large slice causes panic in the decodeRecord method. The size of a record is stored in the length field of a WAL file, and no additional validation is performed on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL. The highest threat from this vulnerability is to system availability.
Related
gitlab
gitlab
Improper Input Validation in etcd
2023-02-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 06:19:36
Denial Of Service (DoS)
2021-03-18 06:52:10
cve
cve
CVE-2020-15106
2020-08-05 19:15:10
github
github
Panic due to malformed WALs in go.etcd.io/etcd
2023-02-07 22:59:30
prion
prion
Design/Logic Flaw
2020-08-05 19:15:00
nvd
nvd
CVE-2020-15106
2020-08-05 19:15:10
cgr
cgr
CVE-2020-15106 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2020-15106 affecting package etcd for versions less than 3.5.0-3
2022-04-09 06:52:04
debiancve
debiancve
CVE-2020-15106
2020-08-05 19:15:10
cvelist
cvelist
CVE-2020-15106 Improper Input Validation in etcd
2020-08-05 19:05:13
ubuntucve
ubuntucve
CVE-2020-15106
2020-08-05 00:00:00
wolfi
wolfi
CVE-2020-15106 vulnerabilities
2024-07-05 21:08:40
osv
osv
Panic due to malformed WALs in go.etcd.io/etcd
2023-02-07 22:59:30
BIT-etcd-2020-15112
2024-03-06 10:52:31
CVE-2020-15112
2020-08-05 20:15:14
nessus
nessus
RHEL 7 : etcd (RHSA-2021:1407)
2021-04-27 00:00:00
Ubuntu 18.04 ESM : etcd vulnerabilities (USN-5628-2)
2023-10-16 00:00:00
Ubuntu 20.04 LTS : etcd vulnerabilities (USN-5628-1)
2022-09-22 00:00:00
redhat
redhat
(RHSA-2021:1407) Moderate: etcd security update
2021-04-27 16:05:53
ibm
ibm
Security Bulletin: IBM Cloud Private is vulnerable to etcd vulnerabilities (CVE-2020-15106, CVE-2020-15112, CVE-2020-15113)
2021-02-26 14:21:09
Security Bulletin: IBM API Connect is vulnerable to denial of service (DoS) via etcd (CVE-2020-15106 CVE-2020-15112 CVE-2020-15113)
2021-02-02 13:37:27
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:36:46
openvas
openvas
Ubuntu: Security Advisory (USN-5628-2)
2023-01-27 00:00:00
Ubuntu: Security Advisory (USN-5628-1)
2022-09-23 00:00:00
etcd < 3.3.23, 3.4.x < 3.4.10 Multiple Vulnerabilities
2020-08-10 00:00:00
ubuntu
ubuntu
etcd vulnerabilities
2022-09-22 00:00:00
etcd vulnerabilities
2022-09-22 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: etcd-3.4.13-1.fc32
2021-01-04 01:18:15
photon
photon
Important Photon OS Security Update - PHSA-2020-0130
2020-08-25 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0130
2020-08-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1
2020-09-05 00:00:00