Advisoriesby Ibis
Apache ZooKeeper security advisories
9 advisories · 2 critical or high in 12 months · latest Mar 7
9 advisories
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManagerCVE-2026-24281fixed in 3.8.6 +1Apache ZooKeeper has improper handling of configuration valuesCVE-2026-24308fixed in 3.8.6 +1Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore CommandsCVE-2025-58457fixed in 3.9.4Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin ServerCVE-2024-51504fixed in 3.9.3Apache ZooKeeper vulnerable to information disclosure in persistent watchers handlingCVE-2024-23944fixed in 3.8.4 +1Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeperCVE-2023-44981fixed in 3.7.2 +2Uncontrolled Resource Consumption in Apache ZooKeeperCVE-2017-5637fixed in 3.4.10 +1Missing Authorization in Apache ZooKeeperCVE-2018-8012fixed in 3.4.10 +1Access control bypass in Apache ZooKeeperCVE-2019-0201fixed in 3.4.14 +1About Apache ZooKeeper
Coordination for distributed systems.
Packages watched: org.apache.zookeeper:zookeeper (Maven).