Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6559-1
HistoryJan 16, 2024 - 12:00 a.m.

ZooKeeper vulnerabilities

2024-01-1600:00:00
ubuntu.com
13
zookeeper
ubuntu
vulnerabilities
authorization
coordination service
distributed applications
sensitive information
sasl quorum peer
authentication
bypass

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

8 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • zookeeper - High-performance coordination service for distributed applications

Details

It was discovered that ZooKeeper incorrectly handled authorization for
the getACL() command. A remote attacker could possibly use this issue to
obtain sensitive information. This issue only affected Ubuntu 14.04
LTS and Ubuntu 16.04 LTS. (CVE-2019-0201)

Damien Diederen discovered that ZooKeeper incorrectly handled
authorization if SASL Quorum Peer authentication is enabled. An
attacker could possibly use this issue to bypass ZooKeeper’s
authorization system. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04
and Ubuntu 23.10. (CVE-2023-44981)

Related

osv 10
nessus 10
openvas 6
redhat 6
debian 4
ibm 28
github 2
cve 2
prion 2
debiancve 2
cgr 1
veracode 2
freebsd 1
ubuntucve 2
redhatcve 2
wolfi 1
f5 1
photon 6
qualysblog 1
oracle 5
osv
osv
zookeeper vulnerabilities
2024-01-16 14:46:02
BIT-2023-44981
2023-10-19 06:29:46
zookeeper - security update
2023-10-20 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : ZooKeeper vulnerabilities (USN-6559-1)
2024-01-16 00:00:00
Debian DLA-3624-1 : zookeeper - LTS security update
2023-10-20 00:00:00
Debian DSA-5544-1 : zookeeper - security update
2023-11-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6559-1)
2024-01-17 00:00:00
Debian: Security Advisory (DSA-5544-1)
2023-11-01 00:00:00
Debian: Security Advisory (DLA-3624-1)
2023-10-23 00:00:00
redhat
redhat
(RHSA-2024:0705) Moderate: Red Hat AMQ Broker 7.11.6 release and security update
2024-02-06 13:12:32
(RHSA-2024:0903) Moderate: Red Hat AMQ Broker 7.10.6 release and security update
2024-02-20 11:33:06
(RHSA-2019:4352) Important: Red Hat JBoss Fuse/A-MQ 6.3 R14 security and bug fix update
2019-12-19 17:16:33
debian
debian
[SECURITY] [DLA 3624-1] zookeeper security update
2023-10-21 12:09:33
[SECURITY] [DSA 5544-1] zookeeper security update
2023-10-31 19:29:51
[SECURITY] [DLA 1801-1] zookeeper security update
2019-05-24 08:07:01
ibm
ibm
Security Bulletin: IBM Event Streams is affected by authorization bypass through user-controlled key vulnerability ( CVE-2023-44981).
2024-03-15 06:26:42
Security Bulletin: Vulnerability in ZooKeeper affects IBM Process Mining CVE-2023-44981
2024-01-16 20:31:25
Security Bulletin: Due to the use of Apache ZooKeeper, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to security bypass.
2023-12-07 09:00:11
github
github
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
2023-10-11 12:30:27
Access control bypass in Apache ZooKeeper
2019-05-29 18:54:11
cve
cve
CVE-2023-44981
2023-10-11 12:15:11
CVE-2019-0201
2019-05-23 14:29:00
prion
prion
Authorization
2023-10-11 12:15:00
Design/Logic Flaw
2019-05-23 14:29:00
debiancve
debiancve
CVE-2023-44981
2023-10-11 12:15:11
CVE-2019-0201
2019-05-23 14:29:00
cgr
cgr
CVE-2023-44981 vulnerabilities
2024-04-27 03:20:18
veracode
veracode
Authorization Bypass
2023-10-13 12:14:27
Information Disclosure
2019-05-24 03:01:36
freebsd
freebsd
apache -- Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication
2023-10-11 00:00:00
ubuntucve
ubuntucve
CVE-2023-44981
2023-10-11 00:00:00
CVE-2019-0201
2019-05-23 00:00:00
redhatcve
redhatcve
CVE-2023-44981
2023-10-12 01:13:03
CVE-2019-0201
2019-05-29 19:50:10
wolfi
wolfi
CVE-2023-44981 vulnerabilities
2024-04-27 03:16:47
f5
f5
K94504224 : Apache ZooKeeper vulnerability CVE-2019-0201
2021-06-29 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0017
2019-06-06 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0017
2019-06-06 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0237
2019-06-12 00:00:00
qualysblog
qualysblog
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

8 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON
Related for USN-6559-1
osv10nessus10openvas6redhat6debian4ibm28github2cve2prion2debiancve2cgr1veracode2freebsd1ubuntucve2redhatcve2wolfi1f51photon6qualysblog1oracle5