CVE-2016-5017

Published: Sep 21, 2016Modified: May 6, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string.

Affected (4)

Products: Apache: Zookeeper

Apache

1 product

Zookeeper

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apache Zookeeper	Up to 3.4.8
Apache Zookeeper	Version 3.5.0
Apache Zookeeper	Version 3.5.1
Apache Zookeeper	Version 3.5.2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://packetstormsecurity.com/files/138755/ZooKeeper-3.4.8-3.5.2-Buffer-Overflow.html

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2016/09/17/3

Source: secalert@redhat.com

Release NotesThird Party Advisory

http://www.securityfocus.com/bid/93044

Source: secalert@redhat.com

https://git-wip-us.apache.org/repos/asf?p=zookeeper.git%3Ba=commitdiff%3Bh=27ecf981a15554dc8e64a28630af7a5c9e2bdf4f

Source: secalert@redhat.com

https://git-wip-us.apache.org/repos/asf?p=zookeeper.git%3Ba=commitdiff%3Bh=f09154d6648eeb4ec5e1ac8a2bacbd2f8c87c14a

Source: secalert@redhat.com

https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/r4b743f407244294f316325458ccaabfce9cd70ca3a6423dbe574035c%40%3Cnotifications.dubbo.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E

Source: secalert@redhat.com

https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html

Source: secalert@redhat.com

https://www.oracle.com/security-alerts/cpujul2020.html

Source: secalert@redhat.com

https://zookeeper.apache.org/security.html#CVE-2016-5017

Source: secalert@redhat.com

Vendor Advisory

http://packetstormsecurity.com/files/138755/ZooKeeper-3.4.8-3.5.2-Buffer-Overflow.html