Advisory details:
github_osv / GHSA-7xrh-hqfc-g7qr
| Advisory ID | github_osv/GHSA-7xrh-hqfc-g7qr |
| Aliases |
CVE-2026-24281
|
| Summary | Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must present a certificate which is trusted by ZKTrustManager which makes the attack vector harder to exploit. Users are recommended to upgrade to version 3.8.6 or 3.9.5, which fixes this issue by introducing a new configuration option to disable reverse DNS lookup in client and quorum protocols. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.7 |
| Risk | 3.4 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 7.4 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-7xrh-hqfc-g7qr/GHSA-7xrh-hqfc-g7qr.json |
| generic_textual | HIGH |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/apache/zookeeper | ||
| https://github.com/apache/zookeeper/commit/66c4efecdda1302d9cfb3af9eedb122b74452bf3 | ||
| https://issues.apache.org/jira/browse/ZOOKEEPER-4986 | ||
| http://www.openwall.com/lists/oss-security/2026/03/07/4 | ||
| 088ddsbrzhd5lxzbqf5n24yg0mwh9jt2 | Advisory | https://lists.apache.org/thread/088ddsbrzhd5lxzbqf5n24yg0mwh9jt2 |
| CVE-2026-24281 | https://nvd.nist.gov/vuln/detail/CVE-2026-24281 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-10T17:36:42Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/24xxx/CVE-2026-24281.json
Source Advisory: vulnrichment/CVE-2026-24281
[{'Exploitation': 'none'},
{'Automatable': 'no'},
{'Technical Impact': 'partial'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-10T17:36:42Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/24xxx/CVE-2026-24281.json
Source Advisory: vulnrichment/CVE-2026-24281
[{'Exploitation': 'none'},
{'Automatable': 'no'},
{'Technical Impact': 'partial'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]