{"id":"CVE-2026-100300","published":"2026-11-04T11:17:06.873","lastModified":"2026-11-04T16:17:30.950","description":"Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server's critical request-processing thread and render the on-disk data directory permanently unbootable.\n\nThis issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-755"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/09pgg7rcpzz44noxgtvpzstwt8fmvsb0","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/11","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}