etcdctl, the command-line client for administering the etcd key-value store.
Version: 3.6.8
Type: CLI
License:
| Expand | CVE | Title | Status | |
|---|---|---|---|---|
| GHSA-6vch-q96h-7gc3 Open GHSA-6vch-q96h-7gc3 in a new tab | etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline | Not affected | High | |
| GHSA-q8m4-xhhv-38mg Open GHSA-q8m4-xhhv-38mg in a new tab | etcd: Authorization bypasses in multiple APIs | Not affected | High | |
| GHSA-xg4h-6gfc-h4m8 Open GHSA-xg4h-6gfc-h4m8 in a new tab | etcd: Watch API authorization bypass via open-ended range requests | Not affected | High | |
| GHSA-rfx7-8w68-q57q Open GHSA-rfx7-8w68-q57q in a new tab | etcd: Nested etcd transactions bypass RBAC authorization checks | Not affected | Unknown | |
| GHSA-x35m-3gp4-4fh5 Open GHSA-x35m-3gp4-4fh5 in a new tab | etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests | Not affected | Unknown | |
| GO-2024-2528 Open GO-2024-2528 in a new tab | Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd | Not affected | Unknown | |
| GO-2024-2529 Open GO-2024-2529 in a new tab | Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd | Not affected | Unknown | |
| GO-2024-2530 Open GO-2024-2530 in a new tab | Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd | Not affected | Unknown | |
| GO-2026-4806 Open GO-2026-4806 in a new tab | Authorization bypasses in multiple APIs in go.etcd.io/etcd | Not affected | Unknown | |
| GO-2026-4808 Open GO-2026-4808 in a new tab | Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd | Not affected | Unknown |
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
etcd: Authorization bypasses in multiple APIs
etcd: Watch API authorization bypass via open-ended range requests
etcd: Nested etcd transactions bypass RBAC authorization checks
etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests
Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd
Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd
Authorization bypasses in multiple APIs in go.etcd.io/etcd
Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd