Bug 2184441 (CVE-2021-28235)

Summary:	CVE-2021-28235 etcd: Information discosure via debug function
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	abishop, aoconnor, arolivei, bdettelb, caswilli, darunesh, dffrench, dfreiber, dsimansk, eglynn, fdupont, fjansen, gzaronik, hartsjc, jburrell, jcantril, jjoyce, jsherril, kaycoth, kshier, lball, lhh, matzew, mburns, mgarciac, mkleinhe, mresvani, ngough, nobody, nweather, oezr, periklis, rgodfrey, rhuss, rogbas, skontopo, spower, stcannon, tkasparek, vkumar, yguenane
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	go.etcd.io/etcd/v3 3.5.8	Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in etcd, where etc-io could allow a remote attacker to gain elevated privileges on the system caused by a vulnerability in the debug function. By sending a specially crafted request, an attacker can gain elevated privileges.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-06-06 00:19:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2184945, 2192839, 2192840, 2203153, 2203157, 2203158, 2203159, 2203161
Bug Blocks:	2184447

Description Pedro Sampaio 2023-04-04 17:12:19 UTC

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

References:

https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png
https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.png
http://etcd.com
https://github.com/etcd-io/etcd

Comment 2 Dhananjay Arunesh 2023-04-06 08:58:11 UTC

Created etcd tracking bugs for this issue:

Affects: fedora-all [bug 2184945]

Comment 4 Avinash Hanwate 2023-05-11 10:42:09 UTC

Created etcd tracking bugs for this issue:

Affects: openstack-rdo [bug 2203153]

Comment 9 errata-xmlrpc 2023-06-05 13:55:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 17.0

Via RHSA-2023:3441 https://access.redhat.com/errata/RHSA-2023:3441

Comment 10 errata-xmlrpc 2023-06-05 14:08:05 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 16.2

Via RHSA-2023:3445 https://access.redhat.com/errata/RHSA-2023:3445

Comment 11 errata-xmlrpc 2023-06-05 14:46:11 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 16.1

Via RHSA-2023:3447 https://access.redhat.com/errata/RHSA-2023:3447

Comment 12 Product Security DevOps Team 2023-06-06 00:19:30 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2021-28235