Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-xkcm-vrk1-u3g6 |
| Summary | Etcd embed auto compaction retention negative value causing a compaction loop or a crash
### Impact
Data Validation
### Detail
The parseCompactionRetention function in embed/etcd.go allows the retention variable value to be negative and causes the node to execute the history compaction in a loop, taking more CPU than usual and spamming logs.
### References
Find out more on this vulnerability in the [security audit report](https://github.com/etcd-io/etcd/blob/master/security/SECURITY_AUDIT.pdf)
### For more information
If you have any questions or comments about this advisory:
* Contact the [etcd security committee](https://github.com/etcd-io/etcd/blob/master/security/security-release-process.md#product-security-committee-psc) |
| Aliases |
| 0 |
| alias |
GHSA-pm3m-32r3-7mfh |
|
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 0.1 - 3 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-xkcm-vrk1-u3g6 |