zookeeper-3.9

43 results · Feed

• Low 3.7
  CVE-2024-6763

  Jetty URI parsing of invalid authority

  Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing. The HttpURI class does insufficient validation on the authority segment of a URI. However the behaviour of H…

  Eclipse Foundation Jetty druid trino Debian Ubuntu Wolfi Maven
  Oct 14, 2024
• Medium 4.3
  CVE-2024-47554

  Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

  Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before …

  Apache Software Foundation Apache Commons IO druid kserve-storage-controller Debian Ubuntu Azure Linux Wolfi Maven
  Oct 3, 2024
• High 7.1
  CVE-2023-6378

  Logback "receiver" DOS vulnerability

  A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

  QOS.CH Sarl logback trino tez Debian Ubuntu Wolfi Maven
  Nov 29, 2023