x/vulndb: potential Go vuln in github.com/etcd-io/etcd: GHSA-chh6-ppwq-jh92

[GoVulnBot]

In GitHub Security Advisory GHSA-chh6-ppwq-jh92, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/etcd-io/etcd	3.3.23	< 3.3.23

Cross references:

• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2021-28235 #1689 EFFECTIVELY_PRIVATE
• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2023-32082 #1771 EFFECTIVELY_PRIVATE
• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2022-34038 #2016 NOT_A_VULNERABILITY
• CVE-2020-15113 appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2020-15113 #2280 LEGACY_FALSE_POSITIVE
• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2020-15113 #2280 LEGACY_FALSE_POSITIVE
• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2020-15114 #2281 LEGACY_FALSE_POSITIVE
• Module github.com/etcd-io/etcd appears in issue x/vulndb: potential Go vuln in github.com/etcd-io/etcd: CVE-2020-15136 #2283 LEGACY_FALSE_POSITIVE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/etcd-io/etcd
      versions:
        - fixed: 3.3.23
      packages:
        - package: github.com/etcd-io/etcd
    - module: github.com/etcd-io/etcd
      versions:
        - introduced: 3.4.0-rc.0
          fixed: 3.4.10
      packages:
        - package: github.com/etcd-io/etcd
summary: Improper Preservation of Permissions in etcd
cves:
    - CVE-2020-15113
ghsas:
    - GHSA-chh6-ppwq-jh92
references:
    - advisory: https://github.com/etcd-io/etcd/security/advisories/GHSA-chh6-ppwq-jh92
    - web: https://nvd.nist.gov/vuln/detail/CVE-2020-15113
    - fix: https://github.com/etcd-io/etcd/commit/6be5c54c94298ae6746a574d2af8227d0c9a998b
    - fix: https://github.com/etcd-io/etcd/commit/e5424fc474b274c9e6b5205165015bc2035745f2
    - web: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/
    - advisory: https://github.com/advisories/GHSA-chh6-ppwq-jh92

[zpavlinovic]

Duplicate of #2280