CVE-2017-5637
High · 7.5CVSS
7.5
EPSS
73.1%
Published
Oct 10, 2017
CISA due date
—
The record
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.zookeeper:zookeeper | 3.4.0 | 3.4.10 |
| Maven | org.apache.zookeeper:zookeeper | 3.5.0 | 3.5.3 |
| Debian:11 | zookeeper | 0 | 3.4.9-3 |
| Debian:12 | zookeeper | 0 | 3.4.9-3 |
| Debian:13 | zookeeper | 0 | 3.4.9-3 |
| Debian:7 | zookeeper | 0 | 3.4.5+dfsg-2+deb7u1 |
| Debian:8 | zookeeper | 0 | 3.4.5+dfsg-2+deb8u2 |
| SUSE:HPE Helion OpenStack 8 | ardana-ansible | 0 | 8.0+git.1583432621.24fa60e-3.70.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-barbican | 0 | 8.0+git.1585152761.8ef3d61-4.33.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-db | 0 | 8.0+git.1583944923.03cca6c-3.31.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-monasca | 0 | 8.0+git.1583944894.38f023a-3.24.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-mq | 0 | 8.0+git.1583944811.dc14403-3.19.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-neutron | 0 | 8.0+git.1584715262.e4ea620-3.39.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-octavia | 0 | 8.0+git.1585171918.418f5cf-3.26.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-tempest | 0 | 8.0+git.1585311051.6ab5488-3.33.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 0 | 8.20200319-1.23.1 |
| SUSE:HPE Helion OpenStack 8 | memcached | 0 | 1.5.17-3.3.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-manila | 0 | 5.1.1~dev5-3.26.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-manila-doc | 0 | 5.1.1~dev5-3.26.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-neutron | 0 | 11.0.9~dev63-3.30.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-neutron-doc | 0 | 11.0.9~dev63-3.30.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-nova | 0 | 16.1.9~dev61-3.35.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-nova-doc | 0 | 16.1.9~dev61-3.35.1 |
| SUSE:HPE Helion OpenStack 8 | pdns | 0 | 4.1.2-3.6.1 |
| SUSE:HPE Helion OpenStack 8 | python-amqp | 0 | 2.4.2-3.9.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-aodh | 0 | 5.1.1~dev7-12.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-barbican | 0 | 5.0.2~dev3-12.25.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-ceilometer | 0 | 9.0.8~dev7-12.22.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-cinder | 0 | 11.2.3~dev23-14.25.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-designate | 0 | 5.0.3~dev7-12.23.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-freezer | 0 | 5.0.0.0~xrc2~dev2-10.20.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-glance | 0 | 15.0.3~dev3-12.23.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-heat | 0 | 9.0.8~dev22-12.25.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-ironic | 0 | 9.1.8~dev8-12.25.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-keystone | 0 | 12.0.4~dev5-11.26.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-magnum | 0 | 5.0.2_5.0.2_5.0.2~dev31-11.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-manila | 0 | 5.1.1~dev5-12.29.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 0 | 1.5.1_1.5.1_1.5.1~dev3-8.20.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-murano | 0 | 4.0.2~dev2-12.20.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-neutron | 0 | 11.0.9~dev63-13.28.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-nova | 0 | 16.1.9~dev61-11.26.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-octavia | 0 | 1.0.6~dev3-12.25.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-sahara | 0 | 7.0.5~dev4-11.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-trove | 0 | 8.0.2~dev2-11.24.1 |
| SUSE:HPE Helion OpenStack 8 | zookeeper | 0 | 3.4.10-3.6.1 |
| SUSE:OpenStack Cloud 8 | ardana-ansible | 0 | 8.0+git.1583432621.24fa60e-3.70.1 |
| SUSE:OpenStack Cloud 8 | ardana-barbican | 0 | 8.0+git.1585152761.8ef3d61-4.33.1 |
| SUSE:OpenStack Cloud 8 | ardana-db | 0 | 8.0+git.1583944923.03cca6c-3.31.1 |
| SUSE:OpenStack Cloud 8 | ardana-monasca | 0 | 8.0+git.1583944894.38f023a-3.24.1 |
| SUSE:OpenStack Cloud 8 | ardana-mq | 0 | 8.0+git.1583944811.dc14403-3.19.1 |
| SUSE:OpenStack Cloud 8 | ardana-neutron | 0 | 8.0+git.1584715262.e4ea620-3.39.1 |
| SUSE:OpenStack Cloud 8 | ardana-octavia | 0 | 8.0+git.1585171918.418f5cf-3.26.1 |
| SUSE:OpenStack Cloud 8 | ardana-tempest | 0 | 8.0+git.1585311051.6ab5488-3.33.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud 8 | memcached | 0 | 1.5.17-3.3.1 |
| SUSE:OpenStack Cloud 8 | openstack-manila | 0 | 5.1.1~dev5-3.26.2 |
| SUSE:OpenStack Cloud 8 | openstack-manila-doc | 0 | 5.1.1~dev5-3.26.1 |
| SUSE:OpenStack Cloud 8 | openstack-neutron | 0 | 11.0.9~dev63-3.30.2 |
| SUSE:OpenStack Cloud 8 | openstack-neutron-doc | 0 | 11.0.9~dev63-3.30.1 |
| SUSE:OpenStack Cloud 8 | openstack-nova | 0 | 16.1.9~dev61-3.35.2 |
| SUSE:OpenStack Cloud 8 | openstack-nova-doc | 0 | 16.1.9~dev61-3.35.1 |
| SUSE:OpenStack Cloud 8 | pdns | 0 | 4.1.2-3.6.1 |
| SUSE:OpenStack Cloud 8 | python-amqp | 0 | 2.4.2-3.9.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-aodh | 0 | 5.1.1~dev7-12.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-barbican | 0 | 5.0.2~dev3-12.25.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-ceilometer | 0 | 9.0.8~dev7-12.22.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-cinder | 0 | 11.2.3~dev23-14.25.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-designate | 0 | 5.0.3~dev7-12.23.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-freezer | 0 | 5.0.0.0~xrc2~dev2-10.20.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-glance | 0 | 15.0.3~dev3-12.23.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-heat | 0 | 9.0.8~dev22-12.25.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-ironic | 0 | 9.1.8~dev8-12.25.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-keystone | 0 | 12.0.4~dev5-11.26.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-magnum | 0 | 5.0.2_5.0.2_5.0.2~dev31-11.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-manila | 0 | 5.1.1~dev5-12.29.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 0 | 1.5.1_1.5.1_1.5.1~dev3-8.20.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-murano | 0 | 4.0.2~dev2-12.20.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-neutron | 0 | 11.0.9~dev63-13.28.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-nova | 0 | 16.1.9~dev61-11.26.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-octavia | 0 | 1.0.6~dev3-12.25.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-sahara | 0 | 7.0.5~dev4-11.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-trove | 0 | 8.0.2~dev2-11.24.1 |
| SUSE:OpenStack Cloud 8 | zookeeper | 0 | 3.4.10-3.6.1 |
| SUSE:OpenStack Cloud Crowbar 8 | crowbar-core | 0 | 5.0+git.1585575551.16781d00d-3.38.1 |
| SUSE:OpenStack Cloud Crowbar 8 | crowbar-ha | 0 | 5.0+git.1585316176.344190f-3.32.1 |
| SUSE:OpenStack Cloud Crowbar 8 | crowbar-openstack | 0 | 5.0+git.1585304226.2164b7895-4.37.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 0 | 8.20200319-1.23.1 |
| SUSE:OpenStack Cloud Crowbar 8 | memcached | 0 | 1.5.17-3.3.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-manila | 0 | 5.1.1~dev5-3.26.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-manila-doc | 0 | 5.1.1~dev5-3.26.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-neutron | 0 | 11.0.9~dev63-3.30.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 0 | 11.0.9~dev63-3.30.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-nova | 0 | 16.1.9~dev61-3.35.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-nova-doc | 0 | 16.1.9~dev61-3.35.1 |
| SUSE:OpenStack Cloud Crowbar 8 | python-amqp | 0 | 2.4.2-3.9.1 |
| SUSE:OpenStack Cloud Crowbar 8 | rubygem-puma | 0 | 2.16.0-3.6.1 |
| SUSE:OpenStack Cloud Crowbar 8 | zookeeper | 0 | 3.4.10-3.6.1 |
| Ubuntu:18.04:LTS | zookeeper | 0 | 3.4.10-3 |
| Ubuntu:Pro:14.04:LTS | zookeeper | 0 | 3.4.5+dfsg-1ubuntu0.1~esm1 |
| Ubuntu:Pro:16.04:LTS | zookeeper | 0 | 3.4.8-1ubuntu0.1~esm1 |
| maven | org.apache.zookeeper/zookeeper | 3.4.0 | No fix |
| maven | org.apache.zookeeper/zookeeper | 3.5.0 | No fix |
Related vulnerabilities
- CVE-2024-51504 When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of… Also affects org.apache.zookeeper:zookeeper
- CVE-2024-23944 Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing… Also affects org.apache.zookeeper:zookeeper
- CVE-2019-0201 An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. Also affects org.apache.zookeeper:zookeeper
- CVE-2016-5017 Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before… Also affects zookeeper
- CVE-2018-3760 There is an information leak vulnerability in Sprockets. Also affects crowbar-core
- CVE-2026-114636 Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes… CWE-306
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-306
- CVE-2026-53714 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-306