Debian/zookeeper: high 7.5
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join
Action: Upgrade zookeeper to 3.4.10-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.10-2 | - |
Fixed versions
| 3.4.10-2 |
Sources
- osv: DEBIAN-CVE-2018-8012#Debian:13/zookeeper
- https://security-tracker.debian.org/tracker/CVE-2018-8012
published · modified · JSON