https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:41:31.356976+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-etcd-2020-15112 BIT-etcd-2020-15112 — Improper Input Validation in etcd 2026-10-03T14:41:31.562016+00:00

Affected: Bitnami: etcd

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:41:31.562084+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cnvd-2020-47587 cnvd-2020-47587 2026-10-03T14:41:31.562105+00:00 cnvd-2020-47587 https://cve.radiocsirt.org/vuln/euvd-2026-42694 EUVD-2026-42694 2026-10-03T14:41:31.562119+00:00 EUVD-2026-42694 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15112 fkie_cve-2020-15112 2026-10-03T14:41:31.562130+00:00

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

 https://cve.radiocsirt.org/vuln/ghsa-m332-53r6-2w93 GHSA-m332-53r6-2w93 — etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic 2026-10-03T14:41:31.562153+00:00

Affected: Go: go.etcd.io/etcd/v3

### Vulnerability type Data Validation

### Detail In the ReadAll method in wal/wal.go, it is possible to have an entry index greater then the number of entries. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

### References Find out more on this vulnerability in the [security audit report](https://github.com/etcd-io/etcd/blob/master/security/SECURITY_AUDIT.pdf)

### For more information If you have any questions or comments about this advisory: * Contact the [etcd security committee](https://github.com/etcd-io/etcd/blob/master/security/security-release-process.md)

 https://cve.radiocsirt.org/vuln/gsd-2020-15112 gsd-2020-15112 2026-10-03T14:41:31.562181+00:00 gsd-2020-15112 https://cve.radiocsirt.org/vuln/msrc_cve-2020-15112 msrc_CVE-2020-15112 — Improper Input Validation in etcd 2026-10-03T14:41:31.562192+00:00 msrc_CVE-2020-15112 https://cve.radiocsirt.org/vuln/rhsa-2021:0916 RHSA-2021:0916 — Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.4 (etcd) security update 2026-10-03T14:41:31.562209+00:00

etcd: Large slice causes panic in decodeRecord method etcd: DoS in wal/wal.go etcd: directories created via os.MkdirAll are not checked for permissions etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS etcd: improper validation of passwords allow an attacker to guess or brute-force user's passwords etcd: no authentication is performed against endpoints provided in the --endpoints flag

 https://cve.radiocsirt.org/vuln/suse-su-2020:3760-1 SUSE-SU-2020:3760-1 — Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package 2026-10-03T14:41:31.562236+00:00

Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15112 UBUNTU-CVE-2020-15112 2026-10-03T14:41:31.562255+00:00

Affected: Ubuntu:16.04:LTS: etcd, Ubuntu:Pro:18.04:LTS: etcd, Ubuntu:20.04:LTS: etcd, Ubuntu:Pro:22.04:LTS: etcd, Ubuntu:Pro:24.04:LTS: etcd, Ubuntu:25.10: etcd, Ubuntu:Pro:26.04:LTS: etcd

In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-03T14:41:31.562283+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.