[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4214-1 zookeeper -- zookeeper

ID: oval:org.secpod.oval:def:603413Date: (C)2018-06-04   (M)2023-12-20
Class: PATCHFamily: unix




It was discovered that Zookeeper, a service for maintaining configuration information, enforced no authentication/authorisation when a server attempts to join a Zookeeper quorum. This update backports authentication support. Additional configuration steps are needed, please see https://cwiki.apache.org/confluence/display/ZOOKEEPER/Server-Server+mutual+authentication for additional information.

Platform:
Debian 8.x
Debian 9.x
Product:
zookeeper
libzookeeper-java
libzookeeper2
libzookeeper-st2
libzookeeper-st-dev
libzookeeper-mt-dev
libzookeeper-mt2
python-zookeeper
Reference:
DSA-4214-1
CVE-2018-8012
CVE    1
CVE-2018-8012
CPE    6
cpe:/a:apache:zookeeper:3.5.3:beta
cpe:/o:debian:debian_linux:9.0
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
...

© SecPod Technologies