CVE-2020-15112

medium

Description

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

References

Advisories
More

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/

https://github.com/etcd-io/etcd/security/advisories/GHSA-m332-53r6-2w93

https://github.com/advisories/GHSA-m332-53r6-2w93

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7121

Details

Source: Mitre, NVD

Published: 2020-08-05

Updated: 2026-06-17

Named Vulnerability: GO-2020-0005Named Vulnerability: GHSA-p4g4-wgrh-qrg2Named Vulnerability: GHSA-m332-53r6-2w93

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00102