https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T18:43:28.159379+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-15106 CVE-2020-15106 — Improper Input Validation in etcd 2026-10-04T18:43:28.230921+00:00

Affected: etcd-io etcd

In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.

 https://vulnerability.circl.lu/vuln/usn-5628-1 USN-5628-1 — etcd vulnerabilities 2026-10-04T18:43:28.231204+00:00

Affected: Ubuntu:20.04:LTS: etcd

It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-15106, CVE-2020-15112)

It was discovered that etcd incorrectly handled directory permissions when trying to create a directory that exists already. An attacker could possibly use this issue to obtain sensitive information. (CVE-2020-15113)

It was discovered that etcd incorrectly handled endpoint setup. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-15114)