GO-2024-2527
LowAdvisory
Published 3 Feb 2024In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 72
- of 17,781 indexed, latest versions
- Container images
- 59
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Insecure ciphers are allowed by default in go.etcd.io/etcd
Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 59 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.etcd.io/ | v0.0.0-20190215181705-784daa04988c, v0.0.0-20190228193606-a943ad0ee4c9, v0.0.0-20191023171146-3cf2f69b5738, v0.0.0-20200401174654-e694b7bb0875+10 more | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 56 |
| go.etcd.io/ | v3.0.0-20210928084031-3df272774672 | 3.3.23 | 3 |
- OSV records
- GHSA-5x4g-q5rc-36jpGO-2024-2527
Charts affected
72 by stars
Container images carrying it
59 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | 6ec3fe59ea55 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 4 |
| dgraph/ | 3b55ea83fffe | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| minio/ | bd11edda91f3 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| quay.io/ | 2ff71ba65cd7 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| quay.io/ | 51f294c56842 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| quay.io/ | bc4aa22272ef | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| quay.io/ | 7bcf286807b8 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 3 |
| chankh/ | 963c44c7f8b1 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| grafana/ | 922b3f412fdd | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| hashicorp/ | 4db614d40d0e | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| hashicorp/ | 8de4d5f31b38 | go.etcd.io/ | 3.3.23 | 2 |
| scaleway/ | dcc14608d000 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| ghcr.io/ | 38bfdf5e3774 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| ghcr.io/ | 78dc63bc5b89 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| ghcr.io/ | 5e88f2205de1 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| quay.io/ | c9b7f6d0d953 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| quay.io/ | 464a3af4dfe0 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 2 |
| ansgroup/ | cd6b0ef2b309 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| coredns/ | 73ca82b4ce82 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| datadog/ | 8f20e56b5311 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| deyaeddin/ | 797b0d06210a | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| douz/ | f2bc7fc068c1 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| ebrianne/ | 9cd17700c9ec | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| gomods/ | d714c7ff0231 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| gomods/ | efb811df7844 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| grafana/ | 825c09373d27 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| grafana/ | 3d85bb66e39b | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| grafana/ | 77e138f81a8e | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| grafana/ | 5fd12edcc694 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| hashicorp/ | dfc3500beb0e | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| hbahadorzadeh/ | bf9756b3bc47 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| hyperledger/ | 37294e05209b | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| kiosksh/ | 501725ba2025 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| kubedb/ | 5829bcedcb0d | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| kubedb/ | 7d27865514ee | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| kubedb/ | 1a06ff0bda52 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| library/ | f98ac9dd97b0 | go.etcd.io/ | 3.3.23 | 1 |
| loftsh/ | 310cc7d690f5 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| loftsh/ | 023b13bf5898 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| mesosphere/ | 63bc411b930b | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| mesosphere/ | b036785a8862 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| mesosphere/ | 94af41b6dd9a | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| mesosphere/ | 4fd8889195fe | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| minio/ | 2a374c124d44 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| sorintlab/ | 36b45c0f97fc | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| streamnative/ | 31533fa9fab7 | go.etcd.io/ | 3.3.23 | 1 |
| thanosio/ | b12d5c31bf5a | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| vineyardcloudnative/ | 9d419aa18faa | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| vultr/ | 541c3e0aec58 | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |
| vultr/ | 1806f17d620c | go.etcd.io/ | 0.5.0-alpha.5.0.20221102000833-1f054980bc27 | 1 |