{"schemaVersion":3,"id":"USN-6559-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"zookeeper vulnerabilities\n\nIt was discovered that ZooKeeper incorrectly handled authorization for\nthe getACL() command. A remote attacker could possibly use this issue to\nobtain sensitive information. This issue only affected Ubuntu 14.04\nLTS and Ubuntu 16.04 LTS. (CVE-2019-0201)\n\nDamien Diederen discovered that ZooKeeper incorrectly handled\nauthorization if SASL Quorum Peer authentication is enabled. An\nattacker could possibly use this issue to bypass ZooKeeper's\nauthorization system. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04\nand Ubuntu 23.10. (CVE-2023-44981)","dates":{"published":"2024-01-16T16:50:17.000Z","modified":"2026-06-29T13:46:57.548Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"zookeeper","name":"zookeeper","label":"zookeeper","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/zookeeper","purlType":"deb","versions":[{"text":"< 3.4.5+dfsg-1ubuntu0.1~esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.8-1ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.13-3ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.13-5ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.13-6ubuntu4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.5+dfsg-1ubuntu0.1~esm3 | < 3.4.8-1ubuntu0.1~esm2 | < 3.4.13-3ubuntu0.1~esm1 | < 3.4.13-5ubuntu0.1 | < 3.4.13-6ubuntu4.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6559-1","label":"ubuntu.com/security/notices/USN-6559-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-0201","label":"ubuntu.com/security/CVE-2019-0201","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2023-44981","label":"ubuntu.com/security/CVE-2023-44981","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-0201","CVE-2023-44981"],"downstream":[],"duplicates":[],"related":["CVE-2019-0201","CVE-2023-44981"]},"timeline":[{"kind":"published","date":"2024-01-16T16:50:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:46:57.548Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:35:31.924Z","stale":false,"partial":false}}