StackRadar

CVE-2023-44981

Critical

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
87
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
3 of 3
affected packages

Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication

Carried by container images the latest versions of 87 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
zookeepermaven3.4.6-tests, 3.4.13-fatjar, 3.4.14-javadoc, 3.5.5+12 more3.7.2, 3.8.3, 3.9.176
zookeeperbitnami3.7.1-167, 3.7.2-0, 3.8.1-13.7.23
Apache ZooKeeperbitnami3.7.1, 3.9.03.7.22
OSV records
BIT-zookeeper-2023-44981GHSA-7286-pgfv-vxvh

Charts affected

87 by stars
ChartLatestAffected imagesRadar Score
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
zookeeper@3.6.2
3.7.2

Open the chart page →

1,449
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
zookeeper@3.5.7
3.7.2

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
zookeeper@3.5.7
3.7.2

Open the chart page →

20,650
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
library/zookeeper:3.8-temurin55d1e5b2e601
zookeeper@3.8.2
3.8.3

Open the chart page →

37,671
pinotinseefrlab0.2.02 of 2See more

pinot inseefrlab 0.2.0

2 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
zookeeper@3.5.8
3.7.2
library/zookeeper:3.5.5b7a76ec06f68
zookeeper@3.5.5
3.7.2

Open the chart page →

10,777
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
zookeeper@3.7.1
3.7.2

Open the chart page →

4,664
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
zookeeper@3.6.2
3.7.2

Open the chart page →

6,696
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
zookeeper@3.6.4
3.7.2

Open the chart page →

4,098
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
zookeeper@3.5.8
3.7.2

Open the chart page →

2,391
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
zookeeper@3.5.5
3.7.2

Open the chart page →

15,855
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
3.7.2

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
3.7.2

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
3.7.2

Open the chart page →

12,108
backendmojaloop0.1.02 of 6See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
zookeeper@3.5.9
3.7.2
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
zookeeper@3.7.2-0
3.7.2

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
3.7.2

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
3.7.2

Open the chart page →

19,226
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
zookeeper@3.6.3
3.7.2

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
zookeeper@3.6.3
3.7.2

Open the chart page →

15,675
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
zookeeper@3.5.9
3.7.2

Open the chart page →

4,547
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
zookeeper@3.4.13-fatjar
3.7.2

Open the chart page →

41,427
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
zookeeper@3.5.6
3.7.2

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
zookeeper@3.8.1
3.8.3

Open the chart page →

9,005
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
zookeeper@3.4.14-javadoc
3.7.2

Open the chart page →

36,215
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
zookeeper@3.5.7
3.7.2

Open the chart page →

6,237
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
zookeeper@3.5.9
3.7.2

Open the chart page →

4,245
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.4.01bbda887bc53
zookeeper@3.5.6
3.7.2

Open the chart page →

10,967
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
zookeeper@3.5.7
3.7.2
apache/shenyu-bootstrap:2.5.11bd5756f6273
zookeeper@3.5.7
3.7.2

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
zookeeper@3.5.6
3.7.2
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
zookeeper@3.5.6
3.7.2

Open the chart page →

12,513
zookeepersignoz0.0.11 of 1See more

zookeeper signoz 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
Apache ZooKeeper@3.7.1
zookeeper@3.7.1-167
zookeeper@3.7.1
3.7.2
3.7.2
3.7.2

Open the chart page →

2,917
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
3.7.2

Open the chart page →

6,065
solrstatcan1.5.102 of 3See more

solr statcan 1.5.10

2 of the 3 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
3.7.2
library/zookeeper:3.5.5b7a76ec06f68
zookeeper@3.5.5
3.7.2

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
zookeeper@3.5.5
3.7.2

Open the chart page →

13,767
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
zookeeper@3.6.3
3.7.2

Open the chart page →

4,240
clickhousetemp-charts0.7.11 of 3See more

clickhouse temp-charts 0.7.1

1 of the 3 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
zookeeper@3.6.1
3.7.2

Open the chart page →

8,707
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
zookeeper@3.5.6
3.7.2
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
zookeeper@3.5.6
3.7.2

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
zookeeper@3.5.5
3.7.2
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
zookeeper@3.5.5
3.7.2
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
zookeeper@3.5.5
3.7.2
thingsboard/tb-node:3.4.1645f43b688f7
zookeeper@3.5.5
3.7.2

Open the chart page →

25,394
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2023-44981.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
zookeeper@3.5.7
3.7.2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
Apache ZooKeeper@3.9.0
zookeeper@3.9.0
3.7.2
3.9.1

Open the chart page →

9,397

Container images carrying it

77 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
farberg/apache-knox-docker:1.6.14b4a22487394
zookeeper@3.5.7
3.7.2
1
gchq/accumulo:2.0.1c460bb587d6d
zookeeper@3.5.6
3.7.2
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
zookeeper@3.6.3
3.7.2
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
zookeeper@3.6.3
3.7.2
1
kubebb/gateway-api:v5.6.04d062f20309c
zookeeper@3.7.1
3.7.2
1
library/solr:8.7.0d124efd81fbb
zookeeper@3.6.2
3.7.2
1
library/storm:2.4.0bd5d420506d6
zookeeper@3.5.9
3.7.2
1
library/zookeeper:3.43882d9493d38
zookeeper@3.4.14-javadoc
3.7.2
1
library/zookeeper:3.6.24c8a6d3b2338
zookeeper@3.6.2
3.7.2
1
library/zookeeper:3.8-temurin55d1e5b2e601
zookeeper@3.8.2
3.8.3
1
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
zookeeper@3.5.8
3.7.2
1
radondb/zookeeper:3.6.216981604f1a0
zookeeper@3.6.2
3.7.2
1
seataio/seata-server:latest703b5de7f1a6
zookeeper@3.5.9
3.7.2
1
seataio/seata-server:1.5.1ee1ed55f4144
zookeeper@3.5.9
3.7.2
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
zookeeper@3.5.5
3.7.2
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
zookeeper@3.5.5
3.7.2
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
zookeeper@3.5.5
3.7.2
1
thingsboard/tb-node:3.4.1645f43b688f7
zookeeper@3.5.5
3.7.2
1
thingsboard/tb-node:3.6.0f40a542832c4
zookeeper@3.8.1
3.8.3
1
trinodb/trino:405ee80ab5eeab2
zookeeper@3.5.5
3.7.2
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
zookeeper@3.5.7
3.7.2
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
zookeeper@3.5.7
3.7.2
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
zookeeper@3.5.6
3.7.2
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
zookeeper@3.6.3
3.7.2
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
zookeeper@3.5.6
3.7.2
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
zookeeper@3.6.3
3.7.2
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
zookeeper@3.6.4
3.7.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.