GO-2020-0005
Panic due to malformed WALs in go.etcd.io/etcd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2020-15106, CVE-2020-15112
- Alias
- BIT-etcd-2020-15106, BIT-etcd-2020-15112, GHSA-m332-53r6-2w93, GHSA-p4g4-wgrh-qrg2
Description
Malformed WALs can be constructed such that WAL.ReadAll can cause attempted out of bounds reads, or creation of arbitrarily sized slices, which may be used as a DoS vector.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · go.etcd.io/etcd | introduced 0, fixed 0.5.0-alpha.5.0.20200423152442-f4b650b51dc4 |
Références
- https://github.com/etcd-io/etcd/pull/11793 FIX
- https://github.com/etcd-io/etcd/commit/f4b650b51dc4a53a8700700dc12e1242ac56ba07 FIX
- https://github.com/etcd-io/etcd/blob/master/security/SECURITY_AUDIT.pdf WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |