CRITICAL9.8CVE-2021-28235Etcd-io Improper Authentication vulnerability >= 3.4.10, < 3.4.11
from 0, < 3.4.42, >= 3.5.0, < 3.5.28, >= 3.6.0, < 3.6.9
HIGH7.5Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go.
>= 3.5.4, < 3.5.5
MEDIUM5.7Improper Preservation of Permissions in etcd
from 0, < 3.3.23, >= 3.4.0, < 3.4.10
MEDIUM5.3Improper Input Validation in etcd
from 0, < 3.3.23, >= 3.4.0, < 3.4.10
MEDIUM5.3Improper Input Validation in etcd
from 0, < 3.3.23, >= 3.4.0, < 3.4.10
LOW3.1etcd key name can be accessed via LeaseTimeToLive API
from 0, < 3.4.26, >= 3.5.0, < 3.5.9
NONE0.0etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
from 0, < 3.4.44, >= 3.5.0, < 3.5.30, >= 3.6.0, < 3.6.11
NONE0.0etcd: Nested etcd transactions bypass RBAC authorization checks
from 0, < 3.4.42, >= 3.5.0, < 3.5.28, >= 3.6.0, < 3.6.9