Skip to content
OpenAdvisories
Critical DLA-3624-1 1 CVE

zookeeper - security update

Published Oct 20, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 zookeeper 3.4.13-2+deb10u1

Vulnerabilities 1

  • Critical 9.1
    CVE-2023-44981

    Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication

    Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the authorization is done by verifying that the instance part in SASL authentication …

    Apache Software Foundation Apache ZooKeeper trino zookeeper Debian Ubuntu Wolfi Maven