CVE-2020-15106 Improper Input Validation in etcd
An attacker can cause a panic in etcd by forging a large frame size in the WAL file, leading to denial of service for RAFT participants.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-15106?
CVE-2020-15106 is a medium-severity denial of service vulnerability in Fedoraproject Fedora, published on 5 Aug 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.
Weakness: CWE-20
Which versions are affected by CVE-2020-15106?
It affects 2 products.
Products include Etcd Etcd, Fedoraproject Fedora.
How do I fix CVE-2020-15106?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-15106 being exploited?
There is no known exploitation of CVE-2020-15106 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
- CVE-2021-28235 Etcd-io Improper Authentication vulnerability
- CVE-2026-33413 etcd: Authorization bypasses in multiple APIs
- CVE-2022-34038 Denial of service in n/a
- CVE-2018-16886 go.etcd.io/etcd Authentication Bypass
- CVE-2026-59818 etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation
Sources
Also known as AZL-6388, DEBIAN-CVE-2020-15106, UBUNTU-CVE-2020-15106.