cve.bz

CVE-2020-15106

6.5 mediumEPSS 1.3%

Medium (6.5). EPSS 1.3% chance of exploitation in the next 30 days. Fixed in go.etcd.io/etcd/v3 3.3.23, 3.4.10.

In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE
CWE-20
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-m332-53r6-2w93Gogo.etcd.io/etcd/v3<3.3.233.3.23
GHSA-m332-53r6-2w93Gogo.etcd.io/etcd/v3>=3.4.0 <3.4.103.4.10
GHSA-p4g4-wgrh-qrg2Gogo.etcd.io/etcd<0.5.0-alpha.5.0.20200423152442-f4b650b51dc40.5.0-alpha.5.0.20200423152442-f4b650b51dc4
GO-2020-0005Gogo.etcd.io/etcd<0.5.0-alpha.5.0.20200423152442-f4b650b51dc40.5.0-alpha.5.0.20200423152442-f4b650b51dc4

References

Check your stackJSON