CVE-2020-15106: Improper Input Validation in etcd
Vulnerability type Data Validation
Detail The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.
Specific Go Packages Affected github.com/etcd-io/etcd/wal
References Find out more on this vulnerability in the security audit report
For more information If you have any questions or comments about this advisory: Contact the etcd security committee
Other sources
A flaw was found In etcd, where a large slice causes panic in the decodeRecord method. The size of a record is stored in the length field of a WAL file, and no additional validation is performed on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL. The highest threat from this vulnerability is to system availability.
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-15106?
CVE-2020-15106 is a vulnerability in etcd before versions 3.3.23 and 3.4.10 that can cause a panic in the decodeRecord method due to a large slice.
What is the vulnerability type of CVE-2020-15106?
CVE-2020-15106 is a data validation vulnerability.
How can CVE-2020-15106 be exploited?
CVE-2020-15106 can be exploited by forging an extremely large frame size in a WAL file, which can lead to a panic in the decodeRecord method.
What is the severity of CVE-2020-15106?
CVE-2020-15106 has a severity rating of 6.5 (medium).
How do I fix CVE-2020-15106?
To fix CVE-2020-15106, update etcd to version 3.3.23 or 3.4.10 depending on your specific environment.