Threats Tagged 'cve-2026-59818'

A denial of service vulnerability exists in etcd, a distributed key-value store used in Red Hat Hardened Images. The flaw allows a remote attacker to exhaust memory by opening many TCP connections to the etcd TLS listener without completing the TLS handshake, causing unbounded goroutine creation. This leads to resource exhaustion and denial of service for the etcd cluster and the Kubernetes control plane it supports. Red Hat has released an update including etcd version 3.7.1-0.1.hum1 to address this issue. Mitigation includes restricting network access to the etcd TLS listener to trusted clients and networks and configuring firewall rules to limit inbound connections to authorized hosts. No known exploits are reported in the wild at this time.

This update includes the following RPMs: etcd: * etcd-3.7.1-0.1.hum1 (aarch64, x86_64) * etcd-3.7.1-0.1.hum1.src (src)

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.