Improper Input Validation in etcd (etcd-io etcd)
En bref
- Source
- NVD
- EPSS
- EPSS 1.26 % · centile 69 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- GitHub_M
- Statut NVD
- Modified
Description
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.
Faiblesses (CWE)
- CWE-20 — Validation d'entrée incorrecte
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | GitHub_M |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · security-advisories@github.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Avis
- GHSA-m332-53r6-2w93 — etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic
- GHSA-p4g4-wgrh-qrg2 — Panic due to malformed WALs in go.etcd.io/etcd
- GO-2020-0005 — Panic due to malformed WALs in go.etcd.io/etcd
Références européennes
- ENISA EUVD · EUVD-2023-0749
- GCVE · GCVE-0-2020-15106
Avis du CERT-FR
- CERTFR-2024-AVI-0199 — Multiples vulnérabilités dans IBM · cert.ssi.gouv.fr
- CERTFR-2022-AVI-591 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:*< 3.3.23cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:*≥ 3.4.0 < 3.4.10cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| etcd-io · etcd | affected < 3.3.23 ; affected < 3.4.10 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |