VulnerableCode Package Details - pkg:maven/org.apache.zookeeper/zookeeper@3.5.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.5.2

Essentials
History (2)

purl	pkg:maven/org.apache.zookeeper/zookeeper@3.5.2
Tags	Ghost

Next non-vulnerable version	3.8.6
Latest non-vulnerable version	3.9.5
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-wme5-ec4u-jqd8 Aliases: CVE-2017-5637 GHSA-7cwj-j333-x7f7	Missing Authentication for Critical Function Two `wchp` and `wchc` commands are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests.	3.5.3-beta Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 3.5.3 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-wme5-ec4u-jqd8
Aliases:
CVE-2017-5637
GHSA-7cwj-j333-x7f7

Missing Authentication for Critical Function Two `wchp` and `wchc` commands are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests.

3.5.3-beta
Affected by 3 other vulnerabilities.

3.5.3
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T16:00:57.595756+00:00	GHSA Importer	Affected by	VCID-wme5-ec4u-jqd8	https://github.com/advisories/GHSA-7cwj-j333-x7f7	38.0.0
2026-04-01T12:47:24.261625+00:00	GitLab Importer	Affected by	VCID-wme5-ec4u-jqd8	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.zookeeper/zookeeper/CVE-2017-5637.yml	38.0.0