PT-2023-13333 · Etcd+1 · Etcd+1

Govulnbot · Publicado 2023-08-22 · Atualizado 2025-02-21 · CVE-2022-34038

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Etcd version 3.5.4

Description The issue allows remote attackers to cause a denial of service via the PageWriter.write function in pagewriter.go. The vendor's position is that this is not a vulnerability.

Recommendations For Etcd version 3.5.4, as a temporary workaround, consider disabling the PageWriter.write function until a patch is available or further guidance is provided by the vendor. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BIT-ETCD-2022-34038

CVE-2022-34038

GHSA-65RP-CV85-263X

OESA-2025-1168

OESA-2025-1169

OESA-2025-1170

Produtos afetados

Debian

Etcd

Referências · 29

• https://github.com/etcd-io/etcd · Nota
• https://github.com/etcd-io/etcd/pull/14022 · Correção
• https://github.com/etcd-io/etcd/pull/14452 · Correção
• https://github.com/etcd-io/etcd/commit/5a315ef88fbfa454e02d27b0b8acb4f89457cd90 · Nota
• https://github.com/golang/vulndb/issues/2016#issuecomment-1698677762 · Nota
• https://t.me/cvenotify/57635 · Publicação no Telegram
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1170 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-41723 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2022-34038 · Aviso do Fabricante
• https://t.me/cibsecurity/69000 · Publicação no Telegram
• https://go-review.googlesource.com/c/vulndb/+/524456/2/data/excluded/GO-2023-2016.yaml · Nota
• https://ubuntu.com/security/CVE-2022-34038 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-28235 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2025-1168 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-34038 · Nota de Segurança