cve.bz

CVE-2020-15112

6.5 mediumEPSS 1.3%

Medium (6.5). EPSS 1.3% chance of exploitation in the next 30 days. Fixed in go.etcd.io/etcd/v3 3.3.23, 3.4.10.

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWEs
CWE-129, CWE-20
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-m332-53r6-2w93Gogo.etcd.io/etcd/v3<3.3.233.3.23
GHSA-m332-53r6-2w93Gogo.etcd.io/etcd/v3>=3.4.0 <3.4.103.4.10
GHSA-p4g4-wgrh-qrg2Gogo.etcd.io/etcd<0.5.0-alpha.5.0.20200423152442-f4b650b51dc40.5.0-alpha.5.0.20200423152442-f4b650b51dc4
GO-2020-0005Gogo.etcd.io/etcd<0.5.0-alpha.5.0.20200423152442-f4b650b51dc40.5.0-alpha.5.0.20200423152442-f4b650b51dc4

References

Check your stackJSON