CVE-2026-100302

A flaw was found in Apache ZooKeeper. An authenticated remote attacker can cause a Denial of Service DoS by submitting a request containing multiple bundled read operations for large data nodes. Because the multiRead handler does not restrict the cumulative response size generated in memory, the...

CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302 Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302

The Apache ZooKeeper multiRead request handler in version 3.7.0 through 3.9.6 is vulnerable to a denial of service (DoS) due to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. The multiRead handler does not limit the number of bundled read operations or the cumulative resp...

CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

EUVD-2026-116870

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302: Apache Software Foundation Apache ZooKeeper: Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a…

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

PT-2026-136924

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...