Known vulnerabilities in ZooKeeper
Vendor:
Apache Foundation
Software:
ZooKeeper
Software CPE:
cpe:2.3:a:apache_foundation:zookeeper:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.9.5
3.8.6
3.8.5
3.9.4
3.9.3
3.9.2
3.8.4
3.8.3
3.7.2
3.9.1
3.9.0
3.8.2
3.8.1
3.6.4
3.5.10
3.7.1
3.7.0
1
2
3.6.3
3.5.9
3.6.2
3.6.2-1
3.6.2-0
3.5.8
3.5.8-rc0
3.6.1
3.6.1-1
3.6.1-0
3.6.0
3.6.0-4
3.6.0-3
3.5.7
3.5.7-rc2
3.5.7-rc1
3.5.7-rc0
3.6.0-2
3.6.0-1
3.6.0-0
3.5.6
3.5.6-rc4
3.5.6rc3
3.5.6-rc2
3.5.6-rc1
3.5.6-rc0
post_45_snapshot
3.0.1-rc0
3.1.0-rc0
3.1.0-rc1
3.1.0-rc2
3.1.1-rc0
3.1.2-rc0
3.2.0-rc0
3.2.2-rc0
3.3.3-rc0
3.3.3-rc1
3.3.4-rc0
3.3.5-rc0
3.3.5-rc1
3.3.6-rc0
3.4.0-rc0
3.4.0-rc1
3.4.0-rc2
3.4.1-rc0
3.4.2-rc0
3.4.3-rc0
3.4.4-rc0
3.4.5-rc0
3.4.5-rc1
3.4.6-rc0
3.4.7-rc0
3.4.8-rc0
3.4.9-rc0
3.4.9-rc1
3.4.9-rc2
3.4.10-rc0
3.4.10-rc1
3.4.11-rc0
3.4.11-rc1
3.4.12-rc0
3.4.12-rc1
3.4.13-rc0
3.4.13-rc1
3.4.14-rc0
3.4.14-rc1
3.4.14-rc2
3.4.14-rc3
3.4.14-rc4
3.4.14-rc5
3.5.0-rc0
3.5.1-rc0
3.5.1-rc1
3.5.1-rc2
3.5.1-rc3
3.5.1-rc4
3.5.2-rc0
3.5.2-rc1
3.5.3-rc0
3.5.3-rc1
3.5.4-rc0
3.5.5-rc0
3.5.5-rc1
3.5.5-rc2
3.5.5-rc3
3.5.5-rc4
3.5.5-rc5
3.5.5-rc6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5.0
3.4.14
3.4.13
3.4.12
3.4.11
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.2.2
3.2.1
3.2.0
3.1.2
3.1.1
3.1.0
3.0.1
3.0.0
2.2.1
2.2.0
2.1.0
0.0.1
3.4.8
3.4.9
3.4.10
3.5.4-beta
3.5.0-alpha
3.5.1-alpha
3.5.2-alpha
3.5.3-beta
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU99975 - Authentication Bypass by Spoofing CVE-2024-51504 |
CWE-290 | High | 3.9.3 | 06.11.2024 |
SB2024110667 SB2024121231 SB2024122015 and 12 more |
||
| #VU87570 - Improper Access Control CVE-2024-23944 |
CWE-284 | Low | 3.8.4, 3.9.2 | 15.03.2024 |
SB2024031533 SB2024052921 SB2024061902 and 23 more |
||
| #VU83312 - Authorization Bypass Through User-Controlled Key CVE-2023-44981 |
CWE-639 | Medium | 3.7.2, 3.8.3, 3.9.1 | 20.11.2023 |
SB2023112072 SB2023112073 SB2023112077 and 45 more |
||
| #VU12913 - Improper Authentication CVE-2018-8012 |
CWE-287 | Low | - | 22.05.2018 |
SB2018052204 SB2018060404 SB2022072128 and 4 more |
||
| #VU40092 - Memory corruption CVE-2016-5017 |
CWE-119 | High | - | 21.09.2016 |
SB2016092145 SB2022091313 SB2016122208 and 1 more |