Apache ZooKeeper

Apache ZooKeeper is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Evidence status

Shown dates are scoped to the release and support phase named in the source. They should not be applied to other editions or service packs.

Product overview

Apache ZooKeeper is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Main capabilities

Networked or application service delivery
Administrative and operational interfaces
Versioned maintenance and security updates

Typical use

Used to provide application, infrastructure or operational services to other systems and users.

Deployment

Deployed on servers, virtual machines, containers or managed infrastructure.

Lifecycle records

Release	Boundary	Date
Product policy	End of life	2 February 2024

Official sources

VERIFIED

Apache ZooKeeper official lifecycle source

Checked automatically. A source link alone does not verify a lifecycle boundary.

Extracted 1 lifecycle record(s), including 1 bounded date record(s), from the registered official source.

Open publisher source

Package vulnerability advisories

CVE-2023-44981

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper

Fixed: 3.7.2, 3.8.3, 3.9.1

CVE-2026-24308

Apache ZooKeeper has improper handling of configuration values

Fixed: 3.9.5, 3.8.6

CVE-2026-24281

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Fixed: 3.8.6, 3.9.5

CVE-2024-51504

Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

Fixed: 3.9.3

CVE-2018-8012

Missing Authorization in Apache ZooKeeper

Fixed: 3.4.10, 3.5.4-beta

CVE-2025-58457

Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands

Fixed: 3.9.4

CVE-2024-23944

Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling

Fixed: 3.8.4, 3.9.2

CVE-2019-0201

Access control bypass in Apache ZooKeeper

Fixed: 3.4.14, 3.5.5