-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the lack of validation for the 'pageBytes' parameter in NewPageWriter (called by PageWriter.Write). The patch adds 'verify.Assert(pageBytes > 0)' to NewPageWriter, and the tests explicitly check for panics when pageBytes is <= 0. The CWE-787 (out-of-bounds write) aligns with improper handling of pageBytes leading to crashes. The direct association between the vulnerability description, patch location, and CWE confirms the vulnerable function.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| go.etcd.io/etcd/v3 | go | < 3.5.5 | 3.5.5 |