zookeeper vulnerabilities (Debian)
20 vulnerabilities.
-
zookeeperDebian Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling 7.1 High -
zookeeperDebian Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable 8.7 High -
zookeeperDebian Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread 8.7 High -
zookeeperDebian Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID 8.6 High -
zookeeperDebian Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation 6.0 Medium -
zookeeperDebian Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider 5.3 Medium -
zookeeperDebian Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources 5.3 Medium -
zookeeperDebian Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode 7.5 High -
zookeeperDebian Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode 7.5 High -
zookeeperDebian Apache ZooKeeper: Information disclosure via SetWatches reconnect replay 7.5 High -
zookeeperDebian Apache ZooKeeper: Sensitive information disclosure in client configuration handling 7.5 High -
zookeeperDebian Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager 7.4 High -
zookeeperDebian Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands 4.3 Medium -
zookeeperDebian Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server 9.1 Critical -
zookeeperDebian Apache ZooKeeper: Information disclosure in persistent watcher handling 5.3 Medium -
zookeeperDebian Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication 9.1 Critical -
zookeeperDebian Access control bypass in Apache ZooKeeper 5.9 Medium -
zookeeperDebian Missing Authorization in Apache ZooKeeper 7.5 High -
zookeeperDebian Uncontrolled Resource Consumption in Apache ZooKeeper 7.5 High -
zookeeperDebian Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when... 8.1 High