zookeeper: Incorrect input validation with wchp/wchc four letter words
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apache Software Foundation | Apache ZooKeeper | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat JBoss BPMS 6.4 | |||
| zookeeper | cpe:/a:redhat:jboss_bpms:6.4 | RHSA-2017:3355 | 2017-11-30T00:00:00Z |
| Red Hat JBoss BRMS 6.4 | |||
| zookeeper | cpe:/a:redhat:jboss_enterprise_brms_platform:6.4 | RHSA-2017:3354 | 2017-11-30T00:00:00Z |
| Red Hat JBoss Data Virtualization 6.3 | |||
| zookeeper | cpe:/a:redhat:jboss_data_virtualization:6.3 | RHSA-2017:2477 | 2017-08-15T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-986-1 | zookeeper security update |
Debian DSA |
DSA-3871-1 | zookeeper security update |
Github GHSA |
GHSA-7cwj-j333-x7f7 | Uncontrolled Resource Consumption in Apache ZooKeeper |
Ubuntu USN |
USN-4789-1 | Apache ZooKeeper vulnerabilities |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: 73.1% (73.064% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.