CVE-2017-5637

Source
https://cve.org/CVERecord?id=CVE-2017-5637
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5637.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-5637
Aliases
Downstream
Related
Published
2017-10-10T01:30:22.360Z
Modified
2026-03-15T22:16:27.192722Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later.

References

Affected packages

Git / github.com/apache/zookeeper

Affected ranges

Type
GIT
Repo
https://github.com/apache/zookeeper
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.2"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5637.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    }
]