Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3 when using the \cmd:\ batch mode syntax allows attackers to have unspecified impact via a long command string.