CVE-2024-23944
1 advisory.
Maven/org.apache.zookeeper:zookeeper CVE-2024-23944: medium 5.3
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Action: Upgrade org.apache.zookeeper:zookeeper to 3.8.4 (3.8.x) or 3.9.2 (3.9.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.8.0 | 3.8.4 | - |
| 3.9.0 | 3.9.2 | - |
| 3.6.0 | - | 3.7.2 |
Fixed versions
| 3.8.4 | 3.9.2 |
Sources
- osv: GHSA-r978-9m6m-6gm6
- https://nvd.nist.gov/vuln/detail/CVE-2024-23944
- https://github.com/apache/zookeeper/commit/29c7b9462681f47c2ac12e609341cf9f52abac5c
- https://github.com/apache/zookeeper/commit/65b91d2d9a56157285c2a86b106e67c26520b01d
- https://github.com/apache/zookeeper/commit/daf7cfd04005cff1a4f7cab5ab13d41db88d0cd8
- https://github.com/apache/zookeeper
- https://lists.apache.org/thread/96s5nqssj03rznz9hv58txdb2k1lr79k
- http://www.openwall.com/lists/oss-security/2024/03/14/2
CVE-2024-23944 · published · modified · JSON