CVE-2020-15114

CVE-2020-15114 describes a denial-of-service vulnerability affecting etcd versions prior to 3.3.23 and 3.4.10, impacting products like Fedora and Red Hat etcd. An authenticated attacker can exploit the etcd gateway by configuring it to request itself as an endpoint, leading to an infinite loop that exhausts file descriptors and renders the gateway unresponsive. This high-severity vulnerability (CVSS 7.7) has a low attack complexity and requires local privileges, but can result in a complete denial of service. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.