CVE catalog

CVE-2019-0201

zookeeper: CVE-2019-0201

Severity: High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: May 20, 2019, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 9.71% · Oct 27, 2026

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	zookeeper	sid	`3.9.6-2`	fixed
Debian	zookeeper	forky	`3.9.6-2`	fixed
Debian	zookeeper	trixie	`3.9.3-1+deb13u1`	fixed
Debian	zookeeper	bookworm	`3.8.0-11+deb12u2`	fixed
Debian	zookeeper	bookworm-security	`3.8.0-11+deb12u1`	fixed
Ubuntu	zookeeper	pro	`3.4.10-2`	vulnerable
Ubuntu	zookeeper	pro	`3.4.10-3`	vulnerable
Ubuntu	zookeeper	pro	`3.4.13-3`	vulnerable
Ubuntu	zookeeper	pro	`3.4.13-3ubuntu0.1~esm1`	fixed
Ubuntu	zookeeper	20.04	`3.4.13-1`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-3`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-3build1`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-4`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-5`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-5build1`	vulnerable
Ubuntu	zookeeper	20.04	`3.4.13-5ubuntu0.1`	fixed
Ubuntu	zookeeper	22.04	`3.4.13-5ubuntu4`	vulnerable
Ubuntu	zookeeper	22.04	`3.4.13-6ubuntu2`	vulnerable
Ubuntu	zookeeper	22.04	`3.4.13-6ubuntu3`	vulnerable
Ubuntu	zookeeper	22.04	`3.4.13-6ubuntu4`	vulnerable
Ubuntu	zookeeper	22.04	`3.4.13-6ubuntu4.1`	fixed
Ubuntu	zookeeper	pro	`3.4.6-8`	vulnerable
Ubuntu	zookeeper	pro	`3.4.7-1`	vulnerable
Ubuntu	zookeeper	pro	`3.4.8-1`	vulnerable
Ubuntu	zookeeper	pro	`3.4.8-1ubuntu0.1~esm1`	vulnerable
Ubuntu	zookeeper	pro	`3.4.8-1ubuntu0.1~esm2`	fixed
Suse	ardana-ansible	openstack cloud 9	`9.0+git.1587034359.a12678b-3.19.1`	fixed
Suse	ardana-barbican	openstack cloud 9	`9.0+git.1583953599.cd723bb-3.10.1`	fixed
Suse	ardana-cluster	openstack cloud 9	`9.0+git.1585653734.c1fe3b2-3.13.1`	fixed
Suse	ardana-db	openstack cloud 9	`9.0+git.1586543314.6b6aa20-3.19.1`	fixed
Suse	ardana-designate	openstack cloud 9	`9.0+git.1583445435.4bd1793-3.10.1`	fixed
Suse	ardana-input-model	openstack cloud 9	`9.0+git.1584632190.9541c56-3.16.1`	fixed
Suse	ardana-logging	openstack cloud 9	`9.0+git.1585929695.f35b591-3.10.1`	fixed
Suse	ardana-monasca	openstack cloud 9	`9.0+git.1586769889.d43d736-3.16.1`	fixed
Suse	ardana-mq	openstack cloud 9	`9.0+git.1586350749.a463fd2-3.13.1`	fixed
Suse	ardana-neutron	openstack cloud 9	`9.0+git.1587667603.507fb50-3.19.1`	fixed
Suse	ardana-octavia	openstack cloud 9	`9.0+git.1587486004.8e99c6b-3.16.1`	fixed
Suse	ardana-osconfig	openstack cloud 9	`9.0+git.1586546715.dbd07ab-3.16.1`	fixed
Suse	ardana-tempest	openstack cloud 9	`9.0+git.1587398456.b31cc4a-3.13.1`	fixed
Suse	ardana-tls	openstack cloud 9	`9.0+git.1586301209.c9413b4-3.12.1`	fixed
Suse	memcached	openstack cloud 9	`1.5.17-3.3.1`	fixed
Suse	openstack-ceilometer	openstack cloud 9	`11.1.1~dev5-3.13.2`	fixed
Suse	openstack-cinder	openstack cloud 9	`13.0.10~dev9-3.19.1`	fixed
Suse	openstack-designate	openstack cloud 9	`7.0.1~dev25-3.16.2`	fixed
Suse	openstack-heat	openstack cloud 9	`11.0.3~dev35-3.16.1`	fixed
Suse	openstack-ironic	openstack cloud 9	`11.1.5~dev3-3.16.1`	fixed
Suse	openstack-ironic-image	openstack cloud 9	`9.0.0-3.6.1`	fixed
Suse	openstack-manila	openstack cloud 9	`7.4.2~dev4-4.21.1`	fixed
Suse	openstack-neutron	openstack cloud 9	`13.0.8~dev28-3.22.1`	fixed
Suse	openstack-nova	openstack cloud 9	`18.3.1~dev17-3.22.1`	fixed
Suse	openstack-octavia	openstack cloud 9	`3.2.3~dev2-3.22.1`	fixed
Suse	openstack-octavia-amphora-image	openstack cloud 9	`0.1.3-7.9.2`	fixed
Suse	python-cinderclient	openstack cloud 9	`4.0.3-3.6.2`	fixed
Suse	python-glanceclient	openstack cloud 9	`2.13.2-3.3.2`	fixed
Suse	python-ironic-lib	openstack cloud 9	`2.14.3-3.6.1`	fixed
Suse	python-ironicclient	openstack cloud 9	`2.5.4-4.10.1`	fixed
Suse	python-keystonemiddleware	openstack cloud 9	`5.2.2-17.1`	fixed
Suse	python-manila-tempest-plugin	openstack cloud 9	`0.1.0-3.6.1`	fixed
Suse	python-novaclient	openstack cloud 9	`11.0.1-3.3.1`	fixed
Suse	python-octaviaclient	openstack cloud 9	`1.6.2-3.6.1`	fixed
Suse	python-openstackclient	openstack cloud 9	`3.16.3-11.1`	fixed
Suse	python-os-brick	openstack cloud 9	`2.5.10-3.9.2`	fixed
Suse	python-oslo.config	openstack cloud 9	`6.4.2-3.3.1`	fixed
Suse	python-oslo.rootwrap	openstack cloud 9	`5.14.2-3.3.1`	fixed
Suse	python-oslo.utils	openstack cloud 9	`3.36.5-3.3.1`	fixed
Suse	python-swiftclient	openstack cloud 9	`3.6.1-3.3.1`	fixed
Suse	python-watcherclient	openstack cloud 9	`2.1.1-3.3.1`	fixed
Suse	release-notes-suse-openstack-cloud	openstack cloud 9	`9.20200319-3.18.1`	fixed
Suse	venv-openstack-barbican	openstack cloud 9	`7.0.1~dev24-3.17.1`	fixed
Suse	venv-openstack-cinder	openstack cloud 9	`13.0.10~dev9-3.17.1`	fixed
Suse	venv-openstack-designate	openstack cloud 9	`7.0.1~dev25-3.17.1`	fixed
Suse	venv-openstack-glance	openstack cloud 9	`17.0.1~dev30-3.15.1`	fixed
Suse	venv-openstack-heat	openstack cloud 9	`11.0.3~dev35-3.17.1`	fixed
Suse	venv-openstack-horizon	openstack cloud 9	`14.1.1~dev1-4.16.1`	fixed
Suse	venv-openstack-ironic	openstack cloud 9	`11.1.5~dev3-4.13.1`	fixed
Suse	venv-openstack-keystone	openstack cloud 9	`14.1.1~dev36-3.17.1`	fixed
Suse	venv-openstack-magnum	openstack cloud 9	`7.2.1~dev1-4.17.1`	fixed
Suse	venv-openstack-manila	openstack cloud 9	`7.4.2~dev4-3.19.1`	fixed
Suse	venv-openstack-monasca	openstack cloud 9	`2.7.1~dev10-3.15.1`	fixed
Suse	venv-openstack-monasca-ceilometer	openstack cloud 9	`1.8.2~dev3-3.17.1`	fixed
Suse	venv-openstack-neutron	openstack cloud 9	`13.0.8~dev28-6.17.1`	fixed
Suse	venv-openstack-nova	openstack cloud 9	`18.3.1~dev17-3.17.1`	fixed
Suse	venv-openstack-octavia	openstack cloud 9	`3.2.3~dev2-4.17.1`	fixed
Suse	venv-openstack-sahara	openstack cloud 9	`9.0.2~dev15-3.17.1`	fixed
Suse	venv-openstack-swift	openstack cloud 9	`2.19.2~dev48-2.12.1`	fixed
Suse	zookeeper	openstack cloud 9	`3.4.13-3.3.1`	fixed
Suse	crowbar-core	openstack cloud crowbar 9	`6.0+git.1587558898.313bb9fd3-3.22.2`	fixed
Suse	crowbar-ha	openstack cloud crowbar 9	`6.0+git.1586256059.e6f67e1-3.16.1`	fixed
Suse	crowbar-openstack	openstack cloud crowbar 9	`6.0+git.1587753188.da39e44a7-3.22.1`	fixed
Suse	memcached	openstack cloud crowbar 9	`1.5.17-3.3.1`	fixed
Suse	openstack-ceilometer	openstack cloud crowbar 9	`11.1.1~dev5-3.13.2`	fixed
Suse	openstack-cinder	openstack cloud crowbar 9	`13.0.10~dev9-3.19.1`	fixed
Suse	openstack-designate	openstack cloud crowbar 9	`7.0.1~dev25-3.16.2`	fixed
Suse	openstack-heat	openstack cloud crowbar 9	`11.0.3~dev35-3.16.1`	fixed
Suse	openstack-ironic	openstack cloud crowbar 9	`11.1.5~dev3-3.16.1`	fixed
Suse	openstack-ironic-image	openstack cloud crowbar 9	`9.0.0-3.6.1`	fixed
Suse	openstack-manila	openstack cloud crowbar 9	`7.4.2~dev4-4.21.1`	fixed
Suse	openstack-neutron	openstack cloud crowbar 9	`13.0.8~dev28-3.22.1`	fixed
Suse	openstack-nova	openstack cloud crowbar 9	`18.3.1~dev17-3.22.1`	fixed
Suse	openstack-octavia	openstack cloud crowbar 9	`3.2.3~dev2-3.22.1`	fixed
Suse	openstack-octavia-amphora-image	openstack cloud crowbar 9	`0.1.3-7.9.2`	fixed
Suse	python-cinderclient	openstack cloud crowbar 9	`4.0.3-3.6.2`	fixed
Suse	python-glanceclient	openstack cloud crowbar 9	`2.13.2-3.3.2`	fixed
Suse	python-ironic-lib	openstack cloud crowbar 9	`2.14.3-3.6.1`	fixed
Suse	python-ironicclient	openstack cloud crowbar 9	`2.5.4-4.10.1`	fixed
Suse	python-keystonemiddleware	openstack cloud crowbar 9	`5.2.2-17.1`	fixed
Suse	python-manila-tempest-plugin	openstack cloud crowbar 9	`0.1.0-3.6.1`	fixed
Suse	python-novaclient	openstack cloud crowbar 9	`11.0.1-3.3.1`	fixed
Suse	python-octaviaclient	openstack cloud crowbar 9	`1.6.2-3.6.1`	fixed
Suse	python-openstackclient	openstack cloud crowbar 9	`3.16.3-11.1`	fixed
Suse	python-os-brick	openstack cloud crowbar 9	`2.5.10-3.9.2`	fixed
Suse	python-oslo.config	openstack cloud crowbar 9	`6.4.2-3.3.1`	fixed
Suse	python-oslo.rootwrap	openstack cloud crowbar 9	`5.14.2-3.3.1`	fixed
Suse	python-oslo.utils	openstack cloud crowbar 9	`3.36.5-3.3.1`	fixed
Suse	python-swiftclient	openstack cloud crowbar 9	`3.6.1-3.3.1`	fixed
Suse	python-watcherclient	openstack cloud crowbar 9	`2.1.1-3.3.1`	fixed
Suse	release-notes-suse-openstack-cloud	openstack cloud crowbar 9	`9.20200319-3.18.1`	fixed
Suse	rubygem-crowbar-client	openstack cloud crowbar 9	`3.9.2-3.6.1`	fixed
Suse	rubygem-puma	openstack cloud crowbar 9	`2.16.0-4.6.1`	fixed
Suse	zookeeper	openstack cloud crowbar 9	`3.4.13-3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	zookeeper	source	sid	`3.4.13-2`	not yet assigned	Not reported	[929283]
Debian	zookeeper	source	forky	`3.4.13-2`	not yet assigned	Not reported	[929283]
Debian	zookeeper	source	trixie	`3.4.13-2`	not yet assigned	Not reported	[929283]
Debian	zookeeper	source	bookworm	`3.4.13-2`	not yet assigned	Not reported	[929283]
Ubuntu	zookeeper	deb	pro	`3.4.13-3ubuntu0.1~esm1`	Not reported	USN-6559-1	Not reported
Ubuntu	zookeeper	deb	20.04	`3.4.13-5ubuntu0.1`	Not reported	USN-6559-1	Not reported
Ubuntu	zookeeper	deb	22.04	`3.4.13-6ubuntu4.1`	Not reported	USN-6559-1	Not reported
Ubuntu	zookeeper	deb	pro	`3.4.8-1ubuntu0.1~esm2`	Not reported	UBUNTU-CVE-2019-0201	Not reported
Suse	ardana-ansible	rpm	openstack cloud 9	`9.0+git.1587034359.a12678b-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-barbican	rpm	openstack cloud 9	`9.0+git.1583953599.cd723bb-3.10.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-cluster	rpm	openstack cloud 9	`9.0+git.1585653734.c1fe3b2-3.13.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-db	rpm	openstack cloud 9	`9.0+git.1586543314.6b6aa20-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-designate	rpm	openstack cloud 9	`9.0+git.1583445435.4bd1793-3.10.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-input-model	rpm	openstack cloud 9	`9.0+git.1584632190.9541c56-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-logging	rpm	openstack cloud 9	`9.0+git.1585929695.f35b591-3.10.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-monasca	rpm	openstack cloud 9	`9.0+git.1586769889.d43d736-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-mq	rpm	openstack cloud 9	`9.0+git.1586350749.a463fd2-3.13.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-neutron	rpm	openstack cloud 9	`9.0+git.1587667603.507fb50-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-octavia	rpm	openstack cloud 9	`9.0+git.1587486004.8e99c6b-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-osconfig	rpm	openstack cloud 9	`9.0+git.1586546715.dbd07ab-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-tempest	rpm	openstack cloud 9	`9.0+git.1587398456.b31cc4a-3.13.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	ardana-tls	rpm	openstack cloud 9	`9.0+git.1586301209.c9413b4-3.12.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	memcached	rpm	openstack cloud 9	`1.5.17-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ceilometer	rpm	openstack cloud 9	`11.1.1~dev5-3.13.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-cinder	rpm	openstack cloud 9	`13.0.10~dev9-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-designate	rpm	openstack cloud 9	`7.0.1~dev25-3.16.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-heat	rpm	openstack cloud 9	`11.0.3~dev35-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ironic	rpm	openstack cloud 9	`11.1.5~dev3-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ironic-image	rpm	openstack cloud 9	`9.0.0-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-manila	rpm	openstack cloud 9	`7.4.2~dev4-4.21.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-neutron	rpm	openstack cloud 9	`13.0.8~dev28-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-nova	rpm	openstack cloud 9	`18.3.1~dev17-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-octavia	rpm	openstack cloud 9	`3.2.3~dev2-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-octavia-amphora-image	rpm	openstack cloud 9	`0.1.3-7.9.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-cinderclient	rpm	openstack cloud 9	`4.0.3-3.6.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-glanceclient	rpm	openstack cloud 9	`2.13.2-3.3.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-ironic-lib	rpm	openstack cloud 9	`2.14.3-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-ironicclient	rpm	openstack cloud 9	`2.5.4-4.10.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-keystonemiddleware	rpm	openstack cloud 9	`5.2.2-17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-manila-tempest-plugin	rpm	openstack cloud 9	`0.1.0-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-novaclient	rpm	openstack cloud 9	`11.0.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-octaviaclient	rpm	openstack cloud 9	`1.6.2-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-openstackclient	rpm	openstack cloud 9	`3.16.3-11.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-os-brick	rpm	openstack cloud 9	`2.5.10-3.9.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.config	rpm	openstack cloud 9	`6.4.2-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.rootwrap	rpm	openstack cloud 9	`5.14.2-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.utils	rpm	openstack cloud 9	`3.36.5-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-swiftclient	rpm	openstack cloud 9	`3.6.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-watcherclient	rpm	openstack cloud 9	`2.1.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	release-notes-suse-openstack-cloud	rpm	openstack cloud 9	`9.20200319-3.18.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-barbican	rpm	openstack cloud 9	`7.0.1~dev24-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-cinder	rpm	openstack cloud 9	`13.0.10~dev9-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-designate	rpm	openstack cloud 9	`7.0.1~dev25-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-glance	rpm	openstack cloud 9	`17.0.1~dev30-3.15.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-heat	rpm	openstack cloud 9	`11.0.3~dev35-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-horizon	rpm	openstack cloud 9	`14.1.1~dev1-4.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-ironic	rpm	openstack cloud 9	`11.1.5~dev3-4.13.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-keystone	rpm	openstack cloud 9	`14.1.1~dev36-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-magnum	rpm	openstack cloud 9	`7.2.1~dev1-4.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-manila	rpm	openstack cloud 9	`7.4.2~dev4-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-monasca	rpm	openstack cloud 9	`2.7.1~dev10-3.15.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-monasca-ceilometer	rpm	openstack cloud 9	`1.8.2~dev3-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-neutron	rpm	openstack cloud 9	`13.0.8~dev28-6.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-nova	rpm	openstack cloud 9	`18.3.1~dev17-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-octavia	rpm	openstack cloud 9	`3.2.3~dev2-4.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-sahara	rpm	openstack cloud 9	`9.0.2~dev15-3.17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	venv-openstack-swift	rpm	openstack cloud 9	`2.19.2~dev48-2.12.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	zookeeper	rpm	openstack cloud 9	`3.4.13-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	crowbar-core	rpm	openstack cloud crowbar 9	`6.0+git.1587558898.313bb9fd3-3.22.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	crowbar-ha	rpm	openstack cloud crowbar 9	`6.0+git.1586256059.e6f67e1-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	crowbar-openstack	rpm	openstack cloud crowbar 9	`6.0+git.1587753188.da39e44a7-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	memcached	rpm	openstack cloud crowbar 9	`1.5.17-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ceilometer	rpm	openstack cloud crowbar 9	`11.1.1~dev5-3.13.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-cinder	rpm	openstack cloud crowbar 9	`13.0.10~dev9-3.19.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-designate	rpm	openstack cloud crowbar 9	`7.0.1~dev25-3.16.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-heat	rpm	openstack cloud crowbar 9	`11.0.3~dev35-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ironic	rpm	openstack cloud crowbar 9	`11.1.5~dev3-3.16.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-ironic-image	rpm	openstack cloud crowbar 9	`9.0.0-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-manila	rpm	openstack cloud crowbar 9	`7.4.2~dev4-4.21.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-neutron	rpm	openstack cloud crowbar 9	`13.0.8~dev28-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-nova	rpm	openstack cloud crowbar 9	`18.3.1~dev17-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-octavia	rpm	openstack cloud crowbar 9	`3.2.3~dev2-3.22.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	openstack-octavia-amphora-image	rpm	openstack cloud crowbar 9	`0.1.3-7.9.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-cinderclient	rpm	openstack cloud crowbar 9	`4.0.3-3.6.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-glanceclient	rpm	openstack cloud crowbar 9	`2.13.2-3.3.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-ironic-lib	rpm	openstack cloud crowbar 9	`2.14.3-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-ironicclient	rpm	openstack cloud crowbar 9	`2.5.4-4.10.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-keystonemiddleware	rpm	openstack cloud crowbar 9	`5.2.2-17.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-manila-tempest-plugin	rpm	openstack cloud crowbar 9	`0.1.0-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-novaclient	rpm	openstack cloud crowbar 9	`11.0.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-octaviaclient	rpm	openstack cloud crowbar 9	`1.6.2-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-openstackclient	rpm	openstack cloud crowbar 9	`3.16.3-11.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-os-brick	rpm	openstack cloud crowbar 9	`2.5.10-3.9.2`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.config	rpm	openstack cloud crowbar 9	`6.4.2-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.rootwrap	rpm	openstack cloud crowbar 9	`5.14.2-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-oslo.utils	rpm	openstack cloud crowbar 9	`3.36.5-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-swiftclient	rpm	openstack cloud crowbar 9	`3.6.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	python-watcherclient	rpm	openstack cloud crowbar 9	`2.1.1-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	release-notes-suse-openstack-cloud	rpm	openstack cloud crowbar 9	`9.20200319-3.18.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	rubygem-crowbar-client	rpm	openstack cloud crowbar 9	`3.9.2-3.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	rubygem-puma	rpm	openstack cloud crowbar 9	`2.16.0-4.6.1`	Not reported	SUSE-SU-2020:1190-1	Not reported
Suse	zookeeper	rpm	openstack cloud crowbar 9	`3.4.13-3.3.1`	Not reported	SUSE-SU-2020:1190-1	Not reported

[Debian bug #929283]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libzookeeper-java]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[libzookeeper-java-doc]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[libzookeeper-mt2]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[libzookeeper-mt-dev]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[libzookeeper-st2]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[libzookeeper-st-dev]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[python3-zookeeper]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[zookeeper]Unknown
Details (4)
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[zookeeper-bin]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
[zookeeperd]Unknown
Source package: [zookeeper]
Details (4)
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u2 · all · bookworm
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12
- 3.8.0-11+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · bookworm; dsa · zookeeper · debian · 12

[Debian 13 (Trixie)]

[libzookeeper-java]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[libzookeeper-java-doc]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[libzookeeper-mt2]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[libzookeeper-mt-dev]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[libzookeeper-st2]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[libzookeeper-st-dev]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[python3-zookeeper]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[zookeeper]Unknown
Details (2)
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[zookeeper-bin]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
[zookeeperd]Unknown
Source package: [zookeeper]
Details (2)
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13
- 3.9.3-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.13-2
  dsa · zookeeper · debian · 13

Observed: Oct 23, 2026, 5:38:14 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]