785 matches found
Uncontrolled Resource Consumption in Apache ZooKeeper
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10,...
GHSA-7CWJ-J333-X7F7 Uncontrolled Resource Consumption in Apache ZooKeeper
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10,...
Missing Authorization in Apache ZooKeeper
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...
GHSA-CCQF-C5HQ-77MP Missing Authorization in Apache ZooKeeper
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...
Critical Photon OS Security Update - PHSA-2022-0373
Updates of 'zookeeper', 'openssl', 'nxtgn-openssl' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-3.0-0373
Updates of 'nxtgn-openssl', 'zookeeper', 'openssl' packages of Photon OS have been released...
Mageia: Security Advisory (MGASA-2016-0328)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:0126-1 Security update for openstack-monasca-agent, spark, spark-kit, zookeeper
This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues: - CVE-2021-4104: Remove JMSAppender from log4j jars bsc1193662...
Exploit for Deserialization of Untrusted Data in Apache Dubbo
CVE-2021-43297 Vulnerability Description There is a poten...
SUSE-SU-2021:4160-1 Security update for logstash, elasticsearch, kafka, zookeeper, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh
This update for logstash, elasticsearch, kafka, zookeeper, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh fixes the following issues: Fixed vulnerability related to log4j version 1.2.x: - CVE-2021-4104: Fixed remote code execution through the JMS API via the...
Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities
Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 68. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: Apache Commons Beanutils...
Central Dogma 安全漏洞
Central Dogma is an open source service configuration version control repository based on Git, ZooKeeper and HTTP/2. A security vulnerability exists in Central Dogma that allows elevation of privilege by mirroring to an internal Dogma repository with files that manage project authorizations...
Log Analysis Security Bulletin List
Question Is there a list of security bulletins that describe resolved vulnerabilities affecting Log Analysis? Answer Log Analysis is made up of several components. The following table contains security bulletins that address the vulnerability of various components in Log Analysis, listed by...
Photon OS 2.0: Zookeeper PHSA-2021-2.0-0358
An update of the zookeeper package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0358. The text itself is copyright C VMware, Inc...
Photon OS 3.0: Zookeeper PHSA-2021-3.0-0254
An update of the zookeeper package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0254. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Critical Photon OS Security Update - PHSA-2021-0254
Updates of 'nss', 'linux-rt', 'libjpeg-turbo', 'linux-esx', 'linux', 'zookeeper', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2021-3.0-0254
Updates of 'libjpeg-turbo', 'linux-aws', 'nss', 'linux', 'linux-secure', 'linux-esx', 'zookeeper', 'linux-rt' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0358
An update of 'libjpeg-turbo', 'nss', 'zookeeper' packages of Photon OS has been released...