Skip to content
OpenAdvisories
Critical DSA-5544-1 1 CVE

zookeeper - security update

Published Oct 31, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 zookeeper 3.4.13-6+deb11u1
Debian · 12 zookeeper 3.8.0-11+deb12u1

Vulnerabilities 1

  • Critical 9.1
    CVE-2023-44981

    Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication

    Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the authorization is done by verifying that the instance part in SASL authentication …

    Apache Software Foundation Apache ZooKeeper trino zookeeper Debian Ubuntu Wolfi Maven