CVE-2020-15114: Uncontrolled Resource Consumption

August 6, 2020 (updated November 18, 2021)

The etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.

References

nvd.nist.gov/vuln/detail/CVE-2020-15114

Code Behaviors & Features

Detect and mitigate CVE-2020-15114 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →