Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the Apache Kafka (CVE-2024-27309).

Summary IBM Event Streams is vulnerable to a denial of service attack due to the Apache Kafka. It is primarily used to build real-time streaming data pipelines and applications that adapt to the data streams. It combines messaging, storage, and stream processing to allow storage and analysis of...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses Kafka - 3.0.2 which is vulnerable to CVE-2024-27309.

Summary Security Bulletin: IBM Maximo Application Suite - IoT Component uses Kafka - 3.0.2 which is vulnerable to CVE-2024-27309. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-27309 DESCRIPTION: Apache Kafka is vulnerable to a...

cn.buli-home:MustardTools (>=0.2.6 <=0.2.8), com.chutneytesting:action-impl (>=2.6.0 <=3.0.0) +74 more potentially affected by CVE-2024-27309 via org.apache.kafka:kafka-metadata (>=3.5.0 <=3.6.1)

org.apache.kafka:kafka-metadata MAVEN version =3.5.0, =0.2.6, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =4.2.5, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.7.0 and more Source cves: CVE-2024-27309 Source advisory: OSV:GHSA-79VV-VP32-GPP7...

CVE-2024-27309 vulnerabilities

Vulnerabilities for packages: kafka-jre-bcfips...

CVE-2024-27309

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with the removed ACL continues to have tw...