| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-115448 | vulnerable | vulnerable | fixed | fixed | Uncontrolled recursion in Apache ZooKeeper. The server serializes its ... |
| CVE-2026-100302 | vulnerable | vulnerable | fixed | fixed | Allocation of Resources Without Limits or Throttling in the multiRead ... |
| CVE-2026-100300 | vulnerable | vulnerable | fixed | fixed | Improper handling of exceptional conditions in the quota subsystem of ... |
| CVE-2026-100252 | vulnerable | vulnerable | fixed | fixed | Improper Authorization vulnerability in Apache ZooKeeper. When SASL a ... |
| CVE-2026-100235 | vulnerable | vulnerable | fixed | fixed | Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) ... |
| CVE-2026-84501 | vulnerable | vulnerable | fixed | fixed | An unauthenticated attacker can inject arbitrary fake log lines into A ... |
| CVE-2026-84439 | vulnerable | vulnerable | fixed | fixed | When audit logging is enabled (zookeeper.audit.enable=true), an unauth ... |
| CVE-2026-79993 | vulnerable | vulnerable | fixed | fixed | The `deleteContainer` opcode (0x14/20) is processed without verifying ... |
| CVE-2026-59969 | vulnerable | vulnerable | fixed | fixed | Apache ZooKeeper quorum TLS fails to enforce peer hostname verificatio ... |
| CVE-2026-59739 | vulnerable | vulnerable | fixed | fixed | Information disclosure via SetWatches reconnect replay in Apache ZooKe ... |
| CVE-2026-24308 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Improper handling of configuration values in ZKConfig in Apache ZooKee ... |
| CVE-2026-24281 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Hostname verification in Apache ZooKeeper ZKTrustManager falls back to ... |
| CVE-2025-58457 | fixed | vulnerable (no DSA) | fixed | fixed | Improper permission check in ZooKeeper AdminServer lets authorized cli ... |