poslední zpráva · zachyceno
SPOJENO PŘES CVE
Vulnerabilities in Apache ZooKeeper
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-100302, CVE-2026-100235, CVE-2026-100252, CVE-2026-100300, Summary: CVE-2026-100302 (CVSS: 7.1): Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server (denial of service) with a single small request. CVE-2026-100235 (CVSS: 6.0): Incorrect authorization due to a time-of-check to time-of-use …
Apache FI FR
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-100235 | 6.0 4.0 · apache | – | – |
| CVE-2026-100252 | 8.6 4.0 · apache | – | – |
| CVE-2026-100300 | 8.7 4.0 · apache | – | – |
| CVE-2026-100302 | 7.1 4.0 · apache | – | – |
| CVE-2026-115448 | 8.7 4.0 · apache | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.7.
Jak se o tom psalo 2
-
· zachyceno · NCSC-FI FI nadpis události
Vulnerabilities in Apache ZooKeeper
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-100302, CVE-2026-100235, CVE-2026-100252, CVE-2026-100300, Summary: CVE-2026-100302 (CVSS: 7.1): Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server (denial of service) with a single small request. CVE-2026-100235 (CVSS: 6.0): Incorrect authorization due to a time-of-check to time-of-use …
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Apache Zookeeper (04 novembre 2026)
De multiples vulnérabilités ont été découvertes dans Apache Zookeeper. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.