USN-6559-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6559-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6559-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6559-1

Related

Published

2024-01-16T16:50:17.952009Z

Modified

2024-01-16T16:50:17.952009Z

Summary

zookeeper vulnerabilities

Details

It was discovered that ZooKeeper incorrectly handled authorization for the getACL() command. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2019-0201)

Damien Diederen discovered that ZooKeeper incorrectly handled authorization if SASL Quorum Peer authentication is enabled. An attacker could possibly use this issue to bypass ZooKeeper's authorization system. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-44981)

References

Affected packages

Ubuntu:Pro:14.04:LTS / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.5+dfsg-1ubuntu0.1~esm3

Affected versions

3.*

3.4.5+dfsg-1

3.4.5+dfsg-1ubuntu0.1~esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "libzookeeper2"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "python-zookeeper"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "python-zookeeper-dbgsym"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.4.5+dfsg-1ubuntu0.1~esm3",
            "binary_name": "zookeeperd"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.8-1ubuntu0.1~esm2

Affected versions

3.*

3.4.6-8

3.4.7-1

3.4.8-1

3.4.8-1ubuntu0.1~esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "libzookeeper2"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "python-zookeeper"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.4.8-1ubuntu0.1~esm2",
            "binary_name": "zookeeperd"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.13-3ubuntu0.1~esm1

Affected versions

3.*

3.4.10-2

3.4.10-3

3.4.13-3

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "python-zookeeper"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "python-zookeeper-dbgsym"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.4.13-3ubuntu0.1~esm1",
            "binary_name": "zookeeperd"
        }
    ]
}

Ubuntu:20.04:LTS / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.13-5ubuntu0.1

Affected versions

3.*

3.4.13-1

3.4.13-3

3.4.13-3build1

3.4.13-4

3.4.13-5

3.4.13-5build1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "python3-zookeeper"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "python3-zookeeper-dbgsym"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.4.13-5ubuntu0.1",
            "binary_name": "zookeeperd"
        }
    ]
}

Ubuntu:22.04:LTS / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.13-6ubuntu4.1

Affected versions

3.*

3.4.13-5ubuntu4

3.4.13-6ubuntu2

3.4.13-6ubuntu3

3.4.13-6ubuntu4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "python3-zookeeper"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "python3-zookeeper-dbgsym"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.4.13-6ubuntu4.1",
            "binary_name": "zookeeperd"
        }
    ]
}

Ubuntu:23.10 / zookeeper

Package

Name: zookeeper
Purl: pkg:deb/ubuntu/zookeeper?arch=src?distro=mantic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.0-11ubuntu0.1

Affected versions

3.*

3.8.0-10build1

3.8.0-11

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-java"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-java-doc"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-mt-dev"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-mt2"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-mt2-dbgsym"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-st-dev"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-st2"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "libzookeeper-st2-dbgsym"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "python3-zookeeper"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "python3-zookeeper-dbgsym"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "zookeeper"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "zookeeper-bin"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "zookeeper-bin-dbgsym"
        },
        {
            "binary_version": "3.8.0-11ubuntu0.1",
            "binary_name": "zookeeperd"
        }
    ]
}