UpHeron
All vulnerabilities

Servers and applications

CVE-2020-15112

An entry with large index causes panic in WAL ReadAll method

Severity
Medium 6.5
Published
5 Aug 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.3.23, 3.4.10
Also known as
GHSA-m332-53r6-2w93
Sources
NVD, Project advisories (GitHub)

Description

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

Affected software

SoftwareAffected versions
etcdServers and applications · cpe:a:etcd:etcd
  • Every version before 3.3.23
  • From 3.4.0 before 3.4.10
etcdServers and applications · github:etcd-io/etcd
  • Every version before 3.3.23

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-15112
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-15112
  • GitHub Advisory Database https://github.com/advisories/GHSA-m332-53r6-2w93
  • github.com https://github.com/etcd-io/etcd/security/advisories/GHSA-m332-53r6-2w93