Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 06:29:44 +0000 CVE-2026-100300 — Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the t… https://db.gcve.eu/vuln/cve-2026-100300 <p><strong>Affected:</strong> Apache Software Foundation Apache ZooKeeper</p> <p>Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server&#39;s critical request-processing thread and render the on-disk data directory permanently unbootable.</p> <p>This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache ZooKeeper</p> <p>Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server&#39;s critical request-processing thread and render the on-disk data directory permanently unbootable.</p> <p>This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-100300