Known vulnerabilities in etcd (Red Hat package)

Vendor: Red Hat Inc.
Software: etcd (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:etcd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 62
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting etcd (Red Hat package) etcd (Red Hat package) is affected by 62 known vulnerabilities: 5 high, 52 medium, 5 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140605 - Improper Certificate Validation
CVE-2026-33810		 CWE-295 Medium
No
No
 3.4.26-9.5.el9ost 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 13 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 75 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 63 more
#VU130102 - Improper Access Control
CVE-2026-33413		 CWE-284 Medium
No
No
 3.4.26-9.5.el9ost 05.05.2026 SB2026050599
SB20260731108
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 3.4.26-9.5.el9ost 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU124115 - Improper Authorization
CVE-2026-27137		 CWE-285 Medium
No
No
 3.4.26-9.5.el9ost 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 10 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 145 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 118 more
#VU122995 - Allocation of Resources Without Limits or Throttling
CVE-2026-24708		 CWE-770 Low
No
No
 3.4.26-9.6.el9ost 17.02.2026 SB2026021762
SB2026021847
SB2026022004
and 2 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 3.4.26-9.5.el9ost 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 147 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 3.3.23-17.el8ost, 3.4.26-9.1.el9ost 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU93874 - Dependency on Vulnerable Third-Party Component
CVE-2024-4438		 CWE-1395 Medium
No
No
 3.4.26-8.el9ost 09.07.2024 SB2024070925
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 3.4.26-8.el9ost 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394		 CWE-401 Medium
No
No
 3.4.26-8.el9ost 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 3.4.26-8.el9ost 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 3.4.26-8.el9ost 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 3.3.23-15.el8ost, 3.4.26-3.el9ost 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 3.3.23-15.el8ost 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more


Showing elements 1 - 20 out of 62