etcd up to 3.3.22/3.4.9 wal/wal.go ReadAll input validation

Summaryinfo

A vulnerability described as problematic has been identified in etcd up to 3.3.22/3.4.9. This affects the function ReadAll of the file wal/wal.go. Such manipulation leads to input validation. This vulnerability is uniquely identified as CVE-2020-15112. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in etcd up to 3.3.22/3.4.9 and classified as problematic. Affected by this issue is the function ReadAll of the file wal/wal.go. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is availability. CVE summarizes:

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

The weakness was disclosed 08/05/2020 (GitHub Repository). The advisory is shared for download at github.com. This vulnerability is handled as CVE-2020-15112 since 06/25/2020. The attack may be launched remotely. The requirement for exploitation is a simple authentication. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 208622 (CentOS 7 : etcd (RHSA-2021:1407)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.3.23 or 3.4.10 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208622). The entries VDB-159333 and VDB-159331 are pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• etcd

Version

• 3.3.0
• 3.3.1
• 3.3.2
• 3.3.3
• 3.3.4
• 3.3.5
• 3.3.6
• 3.3.7
• 3.3.8
• 3.3.9
• 3.3.10
• 3.3.11
• 3.3.12
• 3.3.13
• 3.3.14
• 3.3.15
• 3.3.16
• 3.3.17
• 3.3.18
• 3.3.19
• 3.3.20
• 3.3.21
• 3.3.22
• 3.4.0
• 3.4.1
• 3.4.2
• 3.4.3
• 3.4.4
• 3.4.5
• 3.4.6
• 3.4.7
• 3.4.8
• 3.4.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion