| Package | Affected versions | Patched versions |
|---|---|---|
| go.etcd.io/etcd/v3 | ≥ 3.4.0-rc.0, < 3.4.10< 3.3.23 | 3.4.103.3.23 |
Data Validation
The parseCompactionRetention function in embed/etcd.go allows the retention variable value to be negative and causes the node to execute the history compaction in a loop, taking more CPU than usual and spamming logs.
Find out more on this vulnerability in the security audit report
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free