Known vulnerabilities in etcd
Vendor:
SUSE
Software:
etcd
Software CPE:
cpe:2.3:o:suse:etcd:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105983 - Resource exhaustion CVE-2025-30204 |
CWE-400 | Medium | 3.5.21-150000.7.12.1 | 24.03.2025 |
SB2025032475 SB2025032730 SB2025040333 and 97 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 3.5.12-150000.7.6.1 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU84507 - Resource exhaustion CVE-2023-47108 |
CWE-400 | Medium | 3.5.12-150000.7.6.1 | 18.12.2023 |
SB2023121825 SB2023122137 SB2024010436 and 55 more |
||
| #VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2023-29406 |
CWE-644 | Medium | 3.5.12-150000.7.6.1 | 17.07.2023 |
SB2023071737 SB2023071738 SB2023071739 and 94 more |
||
| #VU75512 - Improper Authorization CVE-2021-28235 |
CWE-285 | High | 3.5.12-150000.7.6.1 | 26.04.2023 |
SB2023042619 SB2023052901 SB2023052902 and 10 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 3.5.12-150000.7.6.1 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU64828 - Improper Authentication CVE-2018-16886 |
CWE-287 | Low | 3.5.12-150000.7.6.1 | 30.06.2022 |
SB2019011416 SB2019013140 SB2019060423 and 8 more |
||
| #VU41650 - Resource Management Errors CVE-2020-15106 |
CWE-399 | Medium | 3.5.12-150000.7.6.1 | 10.08.2020 |
SB2020081020 SB2021050608 SB2022092231 and 5 more |
||
| #VU41624 - Resource Management Errors CVE-2020-15112 |
CWE-399 | Medium | 3.5.12-150000.7.6.1 | 10.08.2020 |
SB2020081020 SB2021050608 SB2022092231 and 5 more |
||
| #VU16546 - Improper input validation CVE-2018-16875 |
CWE-20 | Low | 3.5.12-150000.7.6.1 | 14.12.2018 |
SB2018121408 SB2018121704 SB2018121808 and 22 more |
||
| #VU16545 - Command injection CVE-2018-16873 |
CWE-77 | High | 3.5.12-150000.7.6.1 | 14.12.2018 |
SB2018121408 SB2018121704 SB2018121808 and 22 more |
||
| #VU16544 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-16874 |
CWE-22 | High | 3.5.12-150000.7.6.1 | 14.12.2018 |
SB2018121408 SB2018121704 SB2018121808 and 22 more |