In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade etcd | Jul 30, 2024 | Aug 6, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 6, 2020 |
| Ubuntu | — | Upgrade etcdUpgrade etcd-server (Ubuntu Pro)Upgrade etcd (Ubuntu Pro)Upgrade etcd-client (Ubuntu Pro)Upgrade etcd-clientUpgrade etcd-server | Sep 23, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub