CLEANSTART-2026-AB53044: When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU
Security vulnerability affects the zookeeper-operator package. When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/zookeeper-operatorto a version that resolves this vulnerability.Fixed in 0.1.1-r0
Event History
Frequently Asked Questions
What requests can trigger the excessive CPU consumption?
An unauthenticated remote attacker can send a Range header containing a large number of small ranges to functionality using FileServer, ServeContent, or ServeFile. The low attack complexity and lack of required user interaction indicate that crafting and sending the request is sufficient.
What is the operational impact of successful exploitation?
Successful exploitation can consume excessive CPU, creating a denial-of-service condition. The provided impact information indicates availability impact only, with no reported confidentiality or integrity impact.