[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-15114":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":124,"aliases":125,"duplicate_of":9,"upstream":127,"downstream":128,"duplicates":139,"related":140,"reserved_at":9,"published_at":149,"modified_at":150,"state":151,"summary":152,"references_raw":161,"kevs":186,"epss":187,"epss_history":190,"metrics":446,"affected":461},"CVE-2020-15114","In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.",null,[11,78],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-772","Missing Release of Resource after Effective Lifetime","The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.","weakness","Draft","Base","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-469","HTTP DoS",[24],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1499.002","Service Exhaustion Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,41,45,49,53,57,61,65,69,74],{"id":33,"name":34,"tactic":35},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":42,"name":43,"tactic":44},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":46,"name":47,"tactic":48},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":50,"name":51,"tactic":52},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":54,"name":55,"tactic":56},"D3-APCA","Application Protocol Command Analysis",{"name":36},{"id":58,"name":59,"tactic":60},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":62,"name":63,"tactic":64},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":66,"name":67,"tactic":68},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":70,"name":71,"tactic":72},"D3-NTF","Network Traffic Filtering",{"name":73},"Isolate",{"id":75,"name":76,"tactic":77},"D3-ITF","Inbound Traffic Filtering",{"name":73},{"_key":79,"id":79,"name":80,"description":81,"type":15,"status":16,"abstraction":82,"likelihood_of_exploit":18,"capec":83},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","Class",[84,88,120],{"id":85,"name":86,"techniques":87},"CAPEC-147","XML Ping of the Death",[],{"id":89,"name":90,"techniques":91},"CAPEC-227","Sustained Client Engagement",[92],{"id":93,"name":94,"tactics":95,"countermeasures":97},"T1499","Endpoint Denial of Service",[96],{"id":29,"name":30},[98,100,102,104,106,108,110,112,114,116,118],{"id":33,"name":34,"tactic":99},{"name":36},{"id":38,"name":39,"tactic":101},{"name":36},{"id":42,"name":43,"tactic":103},{"name":36},{"id":46,"name":47,"tactic":105},{"name":36},{"id":50,"name":51,"tactic":107},{"name":36},{"id":54,"name":55,"tactic":109},{"name":36},{"id":58,"name":59,"tactic":111},{"name":36},{"id":62,"name":63,"tactic":113},{"name":36},{"id":66,"name":67,"tactic":115},{"name":36},{"id":70,"name":71,"tactic":117},{"name":73},{"id":75,"name":76,"tactic":119},{"name":73},{"id":121,"name":122,"techniques":123},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[126],"GHSA-2xhq-gv6c-p224",[],[129,131,133,135,137],{"_key":130},"UBUNTU-CVE-2020-15114",{"_key":132},"USN-5628-1",{"_key":134},"USN-5628-2",{"_key":136},"DEBIAN-CVE-2020-15114",{"_key":138},"RHSA-2021:0916",[],[141,143,145,147],{"_key":142},"CGA-4CQP-3VX5-2VPM",{"_key":144},"CGA-CH92-9FCX-PHJJ",{"_key":146},"CGA-G9GV-QVRJ-QXFC",{"_key":148},"CGA-QVH6-6F8V-JH9Q","2020-08-06T22:25:12.000Z","2024-08-04T13:08:21.664Z","Modified",{"cisa_kev":153,"cisa_ransomware":153,"cisa_vendor":9,"epss_severity":154,"epss_score":155,"severity":156,"severity_score":157,"severity_version":158,"severity_source":159,"severity_vector":160,"severity_status":151},false,"low",0.00413,"high",7.7,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",[162,171,177,182],{"url":163,"sources":164,"tags":167},"https://github.com/etcd-io/etcd/security/advisories/GHSA-2xhq-gv6c-p224",[159,165,166],"nvd","osv_go",[168,169,170],"X Refsource CONFIRM","Third Party Advisory","WEB",{"url":172,"sources":173,"tags":174},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/",[159,165],[175,176],"Vendor Advisory","X Refsource FEDORA",{"url":178,"sources":179,"tags":180},"https://nvd.nist.gov/vuln/detail/CVE-2020-15114",[166],[181],"Advisory",{"url":183,"sources":184,"tags":185},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP",[166],[170],[],{"date":188,"score":155,"percentile":189},"2026-06-04",0.61808,[191,194,197,200,203,206,209,212,215,218,221,224,226,229,231,235,238,240,243,246,249,252,255,258,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,316,319,322,325,327,329,332,335,338,341,344,347,350,352,355,357,360,363,366,369,372,374,377,380,383,386,389,392,395,398,400,403,406,409,411,413,416,418,421,424,427,429,432,434,437,440,443],{"date":192,"score":155,"percentile":193},"2025-11-04",0.60763,{"date":195,"score":155,"percentile":196},"2025-11-05",0.60751,{"date":198,"score":155,"percentile":199},"2025-11-06",0.60756,{"date":201,"score":155,"percentile":202},"2025-11-07",0.6077,{"date":204,"score":155,"percentile":205},"2025-11-08",0.60773,{"date":207,"score":155,"percentile":208},"2025-11-09",0.60771,{"date":210,"score":155,"percentile":211},"2025-11-10",0.60747,{"date":213,"score":155,"percentile":214},"2025-11-11",0.60761,{"date":216,"score":155,"percentile":217},"2025-11-12",0.60786,{"date":219,"score":155,"percentile":220},"2025-11-13",0.60794,{"date":222,"score":155,"percentile":223},"2025-11-14",0.60803,{"date":225,"score":155,"percentile":220},"2025-11-15",{"date":227,"score":155,"percentile":228},"2025-11-16",0.60782,{"date":230,"score":155,"percentile":228},"2025-11-17",{"date":232,"score":233,"percentile":234},"2025-11-18",0.00302,0.50573,{"date":236,"score":233,"percentile":237},"2025-11-19",0.50585,{"date":239,"score":233,"percentile":234},"2025-11-20",{"date":241,"score":155,"percentile":242},"2025-11-21",0.60791,{"date":244,"score":155,"percentile":245},"2025-11-22",0.60793,{"date":247,"score":155,"percentile":248},"2025-11-23",0.60776,{"date":250,"score":155,"percentile":251},"2025-11-24",0.60774,{"date":253,"score":155,"percentile":254},"2025-11-25",0.60779,{"date":256,"score":155,"percentile":257},"2025-11-26",0.60781,{"date":259,"score":155,"percentile":217},"2025-11-27",{"date":261,"score":155,"percentile":262},"2025-11-28",0.60764,{"date":264,"score":155,"percentile":265},"2025-11-29",0.60735,{"date":267,"score":155,"percentile":268},"2025-11-30",0.60726,{"date":270,"score":155,"percentile":271},"2025-12-01",0.60872,{"date":273,"score":155,"percentile":274},"2025-12-02",0.60886,{"date":276,"score":155,"percentile":277},"2025-12-03",0.6089,{"date":279,"score":155,"percentile":280},"2025-12-04",0.60723,{"date":282,"score":155,"percentile":283},"2025-12-05",0.60733,{"date":285,"score":155,"percentile":286},"2025-12-06",0.60725,{"date":288,"score":155,"percentile":289},"2025-12-07",0.60718,{"date":291,"score":155,"percentile":292},"2025-12-08",0.60722,{"date":294,"score":155,"percentile":295},"2025-12-09",0.60757,{"date":297,"score":155,"percentile":298},"2025-12-10",0.60802,{"date":300,"score":155,"percentile":301},"2025-12-11",0.60821,{"date":303,"score":155,"percentile":304},"2025-12-12",0.60837,{"date":306,"score":155,"percentile":307},"2025-12-13",0.60838,{"date":309,"score":155,"percentile":310},"2025-12-14",0.60834,{"date":312,"score":155,"percentile":313},"2025-12-15",0.60811,{"date":315,"score":155,"percentile":310},"2025-12-16",{"date":317,"score":155,"percentile":318},"2025-12-17",0.60849,{"date":320,"score":155,"percentile":321},"2025-12-18",0.60891,{"date":323,"score":155,"percentile":324},"2025-12-19",0.609,{"date":326,"score":155,"percentile":324},"2025-12-20",{"date":328,"score":155,"percentile":274},"2025-12-21",{"date":330,"score":155,"percentile":331},"2025-12-22",0.60879,{"date":333,"score":155,"percentile":334},"2025-12-23",0.60893,{"date":336,"score":155,"percentile":337},"2025-12-24",0.60904,{"date":339,"score":155,"percentile":340},"2025-12-25",0.60936,{"date":342,"score":155,"percentile":343},"2025-12-26",0.60931,{"date":345,"score":155,"percentile":346},"2025-12-27",0.60978,{"date":348,"score":155,"percentile":349},"2025-12-28",0.60907,{"date":351,"score":155,"percentile":324},"2025-12-29",{"date":353,"score":155,"percentile":354},"2025-12-30",0.60914,{"date":356,"score":155,"percentile":340},"2025-12-31",{"date":358,"score":155,"percentile":359},"2026-01-01",0.61117,{"date":361,"score":155,"percentile":362},"2026-01-02",0.61105,{"date":364,"score":155,"percentile":365},"2026-01-03",0.61102,{"date":367,"score":155,"percentile":368},"2026-01-04",0.60911,{"date":370,"score":155,"percentile":371},"2026-01-05",0.60898,{"date":373,"score":155,"percentile":368},"2026-01-06",{"date":375,"score":155,"percentile":376},"2026-01-07",0.60934,{"date":378,"score":155,"percentile":379},"2026-01-08",0.6096,{"date":381,"score":155,"percentile":382},"2026-01-09",0.60961,{"date":384,"score":155,"percentile":385},"2026-01-10",0.60955,{"date":387,"score":155,"percentile":388},"2026-01-11",0.60939,{"date":390,"score":155,"percentile":391},"2026-01-12",0.60915,{"date":393,"score":155,"percentile":394},"2026-01-13",0.6088,{"date":396,"score":155,"percentile":397},"2026-01-14",0.60921,{"date":399,"score":155,"percentile":397},"2026-01-15",{"date":401,"score":155,"percentile":402},"2026-01-16",0.60943,{"date":404,"score":155,"percentile":405},"2026-01-17",0.60937,{"date":407,"score":155,"percentile":408},"2026-01-18",0.60933,{"date":410,"score":155,"percentile":397},"2026-01-19",{"date":412,"score":155,"percentile":376},"2026-01-20",{"date":414,"score":155,"percentile":415},"2026-01-21",0.6094,{"date":417,"score":155,"percentile":402},"2026-01-22",{"date":419,"score":155,"percentile":420},"2026-01-23",0.60979,{"date":422,"score":155,"percentile":423},"2026-01-24",0.60987,{"date":425,"score":155,"percentile":426},"2026-01-25",0.60952,{"date":428,"score":155,"percentile":402},"2026-01-26",{"date":430,"score":155,"percentile":431},"2026-01-27",0.60947,{"date":433,"score":155,"percentile":382},"2026-01-28",{"date":435,"score":155,"percentile":436},"2026-01-29",0.60962,{"date":438,"score":155,"percentile":439},"2026-01-30",0.60965,{"date":441,"score":155,"percentile":442},"2026-01-31",0.6097,{"date":444,"score":155,"percentile":445},"2026-02-01",0.61097,[447,452,459],{"source":159,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":448,"cvss_v4_0":9},{"baseScore":157,"baseSeverity":449,"vectorString":160,"impactScore":450,"exploitabilityScore":451},"HIGH",6.7,7.9,{"source":165,"cvss_v2_0":453,"cvss_v3_0":9,"cvss_v3_1":458,"cvss_v4_0":9},{"baseScore":454,"baseSeverity":9,"vectorString":455,"impactScore":456,"exploitabilityScore":457},4,"AV:N/AC:L/Au:S/C:N/I:N/A:P",2.9,8,{"baseScore":157,"baseSeverity":449,"vectorString":160,"impactScore":450,"exploitabilityScore":451},{"source":166,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":460,"cvss_v4_0":9},{"baseScore":157,"baseSeverity":9,"vectorString":160,"impactScore":450,"exploitabilityScore":451},[462,475,483,496],{"ecosystem":9,"name":463,"vendor":464,"product":463,"cpe_part":465,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":466},"etcd","etcd-io","a",[467,472],{"version":468,"is_range":469,"range_type":159,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":471,"fixed_in":9},"\u003C 3.3.23",true,"3.3.23","excluding",{"version":473,"is_range":469,"range_type":159,"version_start":9,"version_start_type":9,"version_end":474,"version_end_type":471,"fixed_in":9},"\u003C 3.4.10","3.4.10",{"ecosystem":9,"name":476,"vendor":477,"product":476,"cpe_part":478,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":479},"fedora","fedoraproject","o",[480],{"version":481,"is_range":153,"range_type":482,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"32","cpe",{"ecosystem":484,"name":485,"vendor":486,"product":463,"cpe_part":9,"purl_type":487,"purl_namespace":486,"purl_name":463,"source":9,"versions":488},"Go","go.etcd.io/etcd","go.etcd.io","golang",[489,494],{"version":490,"is_range":469,"range_type":491,"version_start":492,"version_start_type":493,"version_end":474,"version_end_type":471,"fixed_in":9},"gte3_4_0_rc_0_lt3_4_10","semver","3.4.0-rc.0","including",{"version":495,"is_range":469,"range_type":491,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":471,"fixed_in":9},"lt3_3_23",{"ecosystem":9,"name":463,"vendor":497,"product":463,"cpe_part":465,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":498},"redhat",[499,502],{"version":500,"is_range":469,"range_type":482,"version_start":501,"version_start_type":493,"version_end":470,"version_end_type":471,"fixed_in":9},"gte3.3.0_lt3.3.23","3.3.0",{"version":503,"is_range":469,"range_type":482,"version_start":504,"version_start_type":493,"version_end":474,"version_end_type":471,"fixed_in":9},"gte3.4.0_lt3.4.10","3.4.0"]