CVE-2020-15114High· 7.7▾ TwilightEtcd Gateway can include itself as an endpoint resulting in resource exhaustion
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
1.2%
Denial of Service
The etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.
Find out more on this vulnerability in the security audit report
If you have any questions or comments about this advisory:
go.etcd.io/etcd >= 3.4.0-rc.0, < 3.4.10go.etcd.io/etcd < 3.3.23Upgrade to a patched release:
go.etcd.io/etcd 3.4.10go.etcd.io/etcd 3.3.23Connected by shared product, vendor, weakness, or advisory.
CVE-2020-15115Medium· 5.8etcd has no minimum password length
CVE-2020-15106Medium· 5.3etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic
GHSA-5x4g-q5rc-36jpLowEtcd pkg Insecure ciphers are allowed by default
CVE-2026-73499Highetcd is a distributed key-value store for the data of a distributed system
GHSA-6vch-q96h-7gc3Highetcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
GHSA-xg4h-6gfc-h4m8Highetcd: Watch API authorization bypass via open-ended range requests