Go.etcd.io/etcd/v3

This hub aggregates every CVE we track for Go.etcd.io/etcd/v3, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Go.etcd.io/etcd/v3.

• CVE-2022-34038Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.7.5Aug 22, 2023
• CVE-2021-28235Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.9.8Apr 4, 2023
• CVE-2020-15112Improper Input Validation in etcd6.5Aug 5, 2020
• CVE-2018-16886etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etc...8.1Jan 14, 2019
• CVE-2018-1098A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done w...8.8Apr 3, 2018