Threats Tagged 'ghsa-6vch-q96h-7gc3'

A vulnerability in etcd prior to versions 3.5.33, 3.6.14, and 3.7.1 allows a network attacker to cause unbounded growth of handshake goroutines by opening many TCP connections to the TLS listener and not completing the TLS handshake. This can exhaust memory and cause denial of service, impacting availability of the etcd cluster and dependent systems such as Kubernetes control planes.