Vulnetix
Try Vulnetix Request Demo
CVE-2020-15114 PUBLISHED

In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.

EPSS 0.41% · 61.3th percentile

Risk Scores

EPSS Score
0.41%
61.3th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSetcd0, 3.2.26+dfsg-6, 3.2.26+dfsg-4
Ubuntu:16.04:LTSetcd2.2.2+dfsg-2, 2.2.3+dfsg-1, 2.2.5+dfsg-1
Ubuntu:Pro:18.04:LTSetcd0, 3.2.17+dfsg-1, 3.2.9+dfsg-3

Timeline

References

Open in Interactive Console →