Bug 2455544 (CVE-2026-33817) - CVE-2026-33817 go.etcd.io/bbolt: go.etcd.io/bbolt: Denial of Service via index out-of-range error
Summary: CVE-2026-33817 go.etcd.io/bbolt: go.etcd.io/bbolt: Denial of Service via inde...
Keywords:
Status: NEW
Alias: CVE-2026-33817
Product: Security Response
Classification: Other
Component: vulnerability-draft
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2456001 2456003 2456008 2456009 2456010 2456011 2456016 2456017 2456019 2456020 2456021 2456023 2456024 2456025 2456026 2456027 2456028 2456029 2456031 2456032 2456033 2456034 2456044 2456045 2456048 2455998 2455999 2456000 2456002 2456004 2456005 2456006 2456007 2456012 2456013 2456014 2456015 2456018 2456022 2456030 2456035 2456036 2456037 2456038 2456039 2456040 2456041 2456042 2456043 2456046 2456047 2456049
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-04-06 19:01 UTC by OSIDB Bzimport
Modified: 2026-07-02 16:53 UTC (History)
102 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-04-06 19:01:31 UTC 
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt
Comment 4 Carl George 🤠 2026-06-11 23:05:06 UTC 
> CVE confirmed to be a false positive

https://nvd.nist.gov/vuln/detail/CVE-2026-33817
Note You need to log in before you can comment on or make changes to this bug.