StackRadar

CVE-2024-23944

Medium

Advisory

Published 15 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
48
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
3 of 3
affected packages

Apache ZooKeeper: Information disclosure in persistent watcher handling

Carried by container images the latest versions of 48 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
zookeepermaven3.6.1, 3.6.2, 3.6.3, 3.6.4+6 more3.8.4, 3.9.241
Apache ZooKeeperbitnami3.7.1, 3.7.2, 3.9.03.8.43
zookeeperbitnami3.7.1-167, 3.7.2-0, 3.8.1-13.8.43
OSV records
BIT-zookeeper-2024-23944GHSA-r978-9m6m-6gm6

Charts affected

48 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
zookeeper@3.6.3
no fix listed

Open the chart page →

32,259
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
Apache ZooKeeper@3.7.1
zookeeper@3.7.1-167
zookeeper@3.7.1
3.8.4
3.8.4
no fix listed

Open the chart page →

7,568
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
zookeeper@3.6.2
no fix listed

Open the chart page →

6,048
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
zookeeper@3.8.3
3.8.4

Open the chart page →

7,930
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
zookeeper@3.6.1
no fix listed

Open the chart page →

4,605
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
zookeeper@3.6.4
no fix listed
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
Apache ZooKeeper@3.9.0
zookeeper@3.9.0
3.8.4
3.9.2
thingsboard/tb-node:3.6.0f40a542832c4
zookeeper@3.8.1
3.8.4

Open the chart page →

14,566
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
zookeeper@3.6.3
no fix listed
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
zookeeper@3.8.1-1
zookeeper@3.8.1
3.8.4
3.8.4

Open the chart page →

17,877
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
zookeeper@3.8.3
3.8.4

Open the chart page →

15,562
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
zookeeper@3.8.3
3.8.4
kafkakraft/kafka-controller:3.7.0f261ad288fce
zookeeper@3.8.3
3.8.4
kafkakraft/kafkakraft:3.7.02e4b593b878b
zookeeper@3.8.3
3.8.4

Open the chart page →

14,130
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
zookeeper@3.6.3
no fix listed

Open the chart page →

12,019
clickhousesignoz24.1.181 of 3See more

clickhouse signoz 24.1.18

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
Apache ZooKeeper@3.7.1
zookeeper@3.7.1-167
zookeeper@3.7.1
3.8.4
3.8.4
no fix listed

Open the chart page →

4,695
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
no fix listed

Open the chart page →

24,930
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
zookeeper@3.6.3
no fix listed

Open the chart page →

7,835
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
zookeeper@3.6.3
no fix listed
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
zookeeper@3.6.4
no fix listed

Open the chart page →

14,728
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
zookeeper@3.6.3
no fix listed

Open the chart page →

5,958
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
zookeeper@3.6.4
no fix listed

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
zookeeper@3.6.4
no fix listed

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
zookeeper@3.6.4
no fix listed

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
zookeeper@3.6.4
no fix listed

Open the chart page →

4,033
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
zookeeper@3.7.1
no fix listed

Open the chart page →

16,892
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
zookeeper@3.8.3
3.8.4

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
zookeeper@3.8.3
3.8.4

Open the chart page →

11,961
zookeepergengxiankun-charts0.2.01 of 1See more

zookeeper gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/zookeeper:3.6.24c8a6d3b2338
zookeeper@3.6.2
no fix listed

Open the chart page →

1,913
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
zookeeper@3.8.3
3.8.4

Open the chart page →

49,025
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
zookeeper@3.6.3
no fix listed
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
zookeeper@3.6.3
no fix listed

Open the chart page →

14,312
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
zookeeper@3.6.2
no fix listed

Open the chart page →

1,449
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/zookeeper:3.8-temurin55d1e5b2e601
zookeeper@3.8.2
3.8.4

Open the chart page →

37,671
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
zookeeper@3.7.1
no fix listed

Open the chart page →

4,664
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
zookeeper@3.6.2
no fix listed

Open the chart page →

6,696
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
zookeeper@3.6.4
no fix listed

Open the chart page →

4,098
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
zookeeper@3.8.3
3.8.4

Open the chart page →

2,589
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed

Open the chart page →

12,108
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
Apache ZooKeeper@3.7.2
zookeeper@3.7.2-0
zookeeper@3.7.2
3.8.4
3.8.4
no fix listed

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed

Open the chart page →

19,226
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
zookeeper@3.6.3
no fix listed

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
zookeeper@3.6.3
no fix listed

Open the chart page →

15,675
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
zookeeper@3.8.1
3.8.4

Open the chart page →

9,005
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
zookeeper@3.7.2
no fix listed

Open the chart page →

2,024
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
zookeeper@3.8.3
3.8.4

Open the chart page →

5,269
zookeepersignoz0.0.11 of 1See more

zookeeper signoz 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
Apache ZooKeeper@3.7.1
zookeeper@3.7.1-167
zookeeper@3.7.1
3.8.4
3.8.4
no fix listed

Open the chart page →

2,917
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
no fix listed

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
no fix listed

Open the chart page →

8,806
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
zookeeper@3.6.3
no fix listed

Open the chart page →

4,240
clickhousetemp-charts0.7.11 of 3See more

clickhouse temp-charts 0.7.1

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
zookeeper@3.6.1
no fix listed

Open the chart page →

8,707
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-23944.

Container imageDigestPackageFixed in
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
Apache ZooKeeper@3.9.0
zookeeper@3.9.0
3.8.4
3.9.2

Open the chart page →

9,397

Container images carrying it

41 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
solsson/kafka:latest41e5d8f6f290
zookeeper@3.6.3
no fix listed
5
quay.io/strimzi/operator:0.37.052f376e64b9b
zookeeper@3.6.4
no fix listed
4
library/solr:8.11.18c5f7881cebb
zookeeper@3.6.2
no fix listed
3
signoz/zookeeper:3.7.1fcc4a3288154
Apache ZooKeeper@3.7.1
zookeeper@3.7.1-167
zookeeper@3.7.1
3.8.4
3.8.4
no fix listed
3
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
Apache ZooKeeper@3.9.0
zookeeper@3.9.0
3.8.4
3.9.2
2
library/zookeeper:3.6.180ad2170ad62
zookeeper@3.6.1
no fix listed
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
zookeeper@3.8.3
3.8.4
2
apache/bookkeeper:4.14.5a7d9970c148f
zookeeper@3.6.2
no fix listed
1
apache/druid:29.0.10cef139b6bf1
zookeeper@3.8.3
3.8.4
1
apache/hadoop:3af361b20bec0
zookeeper@3.6.3
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
zookeeper@3.8.1
3.8.4
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
zookeeper@3.6.3
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
zookeeper@3.6.3
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
zookeeper@3.6.3
no fix listed
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
zookeeper@3.6.4
no fix listed
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
zookeeper@3.6.3
no fix listed
1
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
Apache ZooKeeper@3.7.2
zookeeper@3.7.2-0
zookeeper@3.7.2
3.8.4
3.8.4
no fix listed
1
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
zookeeper@3.8.1-1
zookeeper@3.8.1
3.8.4
3.8.4
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
zookeeper@3.6.3
no fix listed
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
zookeeper@3.8.3
3.8.4
1
confluentinc/cp-kafka:7.5.1dc9b972db002
zookeeper@3.6.3
no fix listed
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
zookeeper@3.8.3
3.8.4
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
zookeeper@3.6.4
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
zookeeper@3.7.1
no fix listed
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
zookeeper@3.6.3
no fix listed
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
zookeeper@3.6.3
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
zookeeper@3.8.3
3.8.4
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
zookeeper@3.8.3
3.8.4
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
zookeeper@3.8.3
3.8.4
1
kubebb/gateway-api:v5.6.04d062f20309c
zookeeper@3.7.1
no fix listed
1
library/solr:8.7.0d124efd81fbb
zookeeper@3.6.2
no fix listed
1
library/zookeeper:3.6.24c8a6d3b2338
zookeeper@3.6.2
no fix listed
1
library/zookeeper:3.8-temurin55d1e5b2e601
zookeeper@3.8.2
3.8.4
1
metabase/metabase:v0.53.4.17807bc5cad17
zookeeper@3.8.3
3.8.4
1
opennms/sentinel:36.0.288869082a14f
zookeeper@3.7.2
no fix listed
1
radondb/zookeeper:3.6.216981604f1a0
zookeeper@3.6.2
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
zookeeper@3.8.1
3.8.4
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
zookeeper@3.6.3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
zookeeper@3.8.3
3.8.4
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
zookeeper@3.6.3
no fix listed
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
zookeeper@3.6.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.