Apache ZooKeeper Security Advisory: Multiple Vulnerabilities (Auth Bypass, Info Disclosure, RCE)

Critical Vulnerability Information Vulnerability List CVE-2025-58457: Insufficient Permission Check in AdminServer Snapshot/Restore Commands - Severity: Medium - Affected Versions: Apache ZooKeeper versions prior to 3.9.4 in the 3.9.0 series - Description: In the ZooKeeper AdminServer, insufficient permission checks allow authorized clients to execute snapshot and restore commands even without sufficient privileges. CVE-2024-51504: Authentication bypass with IP-based authentication in Admin Server - Severity: Important - Affected Versions: Apache ZooKeeper versions prior to 3.9.3 in the 3.9.0 series - Description: When using IPAuthenticationProvider, authentication can be bypassed via spoofing. This currently affects only the IP-based authentication implementation in the ZooKeeper Admin Server. CVE-2024-23944: Information disclosure in persistent watcher handling - Severity: Critical - Affected Versions: Apache ZooKeeper versions prior to 3.7.2 in the 3.6.0 series; prior to 3.8.3 in the 3.8.0 series; prior to 3.9.1 in the 3.9.0 series - Description: Due to lack of ACL checks during handling of persistent watchers, information disclosure occurs in Apache ZooKeeper. CVE-2023-44981: Authorization bypass in SASL Quorum Peer Authentication - Severity: Critical - Affected Versions: Apache ZooKeeper versions prior to 3.7.1 in the 3.7.0 series; prior to 3.8.2 in the 3.8.0 series; 3.9.0 and earlier versions - Description: When SASL Quorum Peer authentication is enabled, authorization is performed if the instance part of the SASL authentication ID is listed in the server list in zoo.cfg. CVE-2019-0201: Information disclosure vulnerability in Apache ZooKeeper - Severity: Critical - Affected Versions: Versions prior to ZooKeeper 3.4.14 and supported versions in the 3.5.x series - Description: The getACL() function does not perform any permission checks, returning all ACL information for the requested node, leading to information leakage in Apache ZooKeeper. CVE-2018-8012: Apache ZooKeeper Quorum Peer mutual authentication - Severity: Critical - Affected Versions: Versions prior to ZooKeeper 3.4.10 and supported versions in the 3.5.x series - Description: When a server attempts to join a Quorum, no authentication or authorization is enforced, allowing any endpoint to join the cluster and start propagating forged changes to the leader. CVE-2017-5637: DOS attack on wchp/wchc four letter words (4lw) - Severity: Medium - Affected Versions: ZooKeeper 3.4.0 to 3.4.9 and ZooKeeper 3.5.0 to 3.5.2 - Description: The "wchp/wchc" four-letter commands are CPU-intensive; if abused, they can cause a spike in ZooKeeper server CPU usage, leading to denial of service for legitimate client requests. CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell - Severity: Medium - Affected Versions: ZooKeeper 3.4.0 to 3.4.8 and ZooKeeper 3.5.0 to 3.5.2 - Description: A buffer overflow vulnerability exists in the ZooKeeper C client shell ("cli_st" and "cli_mt"), related to the "cmd" batch mode syntax during command-line parsing.

Goal Reached Thanks to every supporter — we hit 100%!

Apache ZooKeeper Security Advisory: Multiple Vulnerabilities (Auth Bypass, Info Disclosure, RCE)