Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-5637

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7cwj-j333-x7f7

Uncontrolled Resource Consumption in Apache ZooKeeper Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later.

gitlab/maven/org.apache.zookeeper/zookeeper/CVE-2017-5637

Missing Authentication for Critical Function Two `wchp` and `wchc` commands are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests.