CVE-2022-34917
unknown
CVSS v3
—
CVSS v4 NEW
—
VIR risk
—
Description
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.apache.kafka:kafka | >=2.8.0,<2.8.2 | 2.8.2 |
| Maven | org.apache.kafka:kafka | >=3.0.0,<3.0.2 | 3.0.2 |
| Maven | org.apache.kafka:kafka | >=3.1.0,<3.1.2 | 3.1.2 |
| Maven | org.apache.kafka:kafka | >=3.2.0,<3.2.3 | 3.2.3 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-34917
- https://github.com/apache/kafka/commit/14951a83e3fdead212156e5532359500d72f68bc
- https://github.com/apache/kafka/commit/2bfa24b2bd416e7b8c4a0c566b984c43904fdecb
- https://github.com/apache/kafka/commit/aaceb6b79bfcb1d32874ccdbc8f3138d1c1c00fb
- https://github.com/apache/kafka/commit/c1295662768e64b4467e27c3d5158f95f2307657
- https://issues.apache.org/jira/browse/KAFKA-14063
- https://kafka.apache.org/cve-list
- https://kafka.apache.org/cve-list#CVE-2022-34917
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.