CVE-2023-44981
CriticalAdvisory
Published 11 Oct 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.1
- base score, highest
- EPSS
- 0.017
- 76th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 87
- of 17,781 indexed, latest versions
- Container images
- 77
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication
Carried by container images the latest versions of 87 of 17,781 indexed charts deploy, on 77 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| zookeepermaven | 3.4.6-tests, 3.4.13-fatjar, 3.4.14-javadoc, 3.5.5+12 more | 3.7.2, 3.8.3, 3.9.1 | 76 |
| zookeeperbitnami | 3.7.1-167, 3.7.2-0, 3.8.1-1 | 3.7.2 | 3 |
| Apache ZooKeeperbitnami | 3.7.1, 3.9.0 | 3.7.2 | 2 |
- OSV records
- BIT-zookeeper-2023-44981GHSA-7286-pgfv-vxvh
Charts affected
87 by stars
Container images carrying it
77 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gradiant/ | 3b28784ba41f | zookeeper | 3.7.2 | 7 |
| wurstmeister/ | 2d4bbf9cc83d | zookeeper | 3.7.2 | 7 |
| library/ | b7a76ec06f68 | zookeeper | 3.7.2 | 6 |
| solsson/ | 41e5d8f6f290 | zookeeper | 3.7.2 | 5 |
| bde2020/ | 620267768985 | zookeeper | 3.7.2 | 4 |
| quay.io/ | 52f376e64b9b | zookeeper | 3.7.2 | 4 |
| apache/ | e8b7c4ddd069 | zookeeper | 3.7.2 | 3 |
| apache/ | 0bd3b25c4be4 | zookeeper | 3.7.2 | 3 |
| gchq/ | 5ec58edbb2db | zookeeper | 3.7.2 | 3 |
| library/ | 8c5f7881cebb | zookeeper | 3.7.2 | 3 |
| signoz/ | fcc4a3288154 | Apache ZooKeeper zookeeper zookeeper | 3.7.2 3.7.2 3.7.2 | 3 |
| apachepulsar/ | b341ef76a852 | zookeeper | 3.7.2 | 2 |
| bitnamilegacy/ | 10ed1ea3c8d1 | Apache ZooKeeper zookeeper | 3.7.2 3.9.1 | 2 |
| confluentinc/ | ac776fad95a5 | zookeeper | 3.7.2 | 2 |
| confluentinc/ | cae577096489 | zookeeper | 3.7.2 | 2 |
| danisla/ | 255ba2dd739b | zookeeper | 3.7.2 | 2 |
| gradiant/ | aae4f8a21f8b | zookeeper | 3.7.2 | 2 |
| library/ | 80ad2170ad62 | zookeeper | 3.7.2 | 2 |
| wurstmeister/ | 7a7fd44a7210 | zookeeper | 3.7.2 | 2 |
| 5200710/ | 092d3088a5fb | zookeeper | 3.7.2 | 1 |
| apache/ | a7d9970c148f | zookeeper | 3.7.2 | 1 |
| apache/ | 1f96558fd292 | zookeeper | 3.7.2 | 1 |
| apache/ | af361b20bec0 | zookeeper | 3.7.2 | 1 |
| apachepinot/ | 0018bb04ced7 | zookeeper | 3.7.2 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | zookeeper | 3.8.3 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | zookeeper | 3.7.2 | 1 |
| apachepulsar/ | 4db6ff0b4045 | zookeeper | 3.7.2 | 1 |
| apachepulsar/ | d056c89b7131 | zookeeper | 3.7.2 | 1 |
| apachepulsar/ | d538416d5afe | zookeeper | 3.7.2 | 1 |
| apache/ | e2be712fc4f4 | zookeeper | 3.7.2 | 1 |
| apache/ | 1bd5756f6273 | zookeeper | 3.7.2 | 1 |
| apache/ | 133d35d2c263 | zookeeper | 3.7.2 | 1 |
| apache/ | b4ec8c18d079 | zookeeper | 3.7.2 | 1 |
| assistiot/ | c8b6c7eaa0cd | zookeeper | 3.7.2 | 1 |
| bitnamilegacy/ | 8657bb93a581 | zookeeper | 3.7.2 | 1 |
| bitnamilegacy/ | ac64829e45b3 | zookeeper | 3.7.2 | 1 |
| bitnamilegacy/ | b6e381ffd6ae | zookeeper | 3.7.2 | 1 |
| bitnamilegacy/ | cbf54314c401 | zookeeper | 3.7.2 | 1 |
| bitnamilegacy/ | dba59d740e13 | zookeeper zookeeper | 3.7.2 3.8.3 | 1 |
| confluentinc/ | f2975d507a2a | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 8f1544df1f48 | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 1bbda887bc53 | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 3bf359d5e340 | zookeeper | 3.7.2 | 1 |
| confluentinc/ | dc9b972db002 | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 4bc70a83ca6f | zookeeper | 3.7.2 | 1 |
| confluentinc/ | b0b7aa26254a | zookeeper | 3.7.2 | 1 |
| confluentinc/ | ee403d5b9090 | zookeeper | 3.7.2 | 1 |
| confluentinc/ | b651d4b6185a | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 0bec03c1f3ce | zookeeper | 3.7.2 | 1 |
| confluentinc/ | 78c190f4472c | zookeeper | 3.7.2 | 1 |