Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmpj-7c96-mrg8

Опубликовано: 14 июн. 2022
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

Пакеты

Наименование

org.apache.hadoop:hadoop-common

maven
Затронутые версииВерсия исправления

>= 3.3.0, < 3.3.2

3.3.2

Наименование

org.apache.hadoop:hadoop-common

maven
Затронутые версииВерсия исправления

>= 3.0.0, < 3.2.3

3.2.3

Наименование

org.apache.hadoop:hadoop-common

maven
Затронутые версииВерсия исправления

< 2.10.2

2.10.2

EPSS

Процентиль: 79%
0.01194
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120
CWE-131
CWE-787

Связанные уязвимости

CVSS3: 9.8
redhat
больше 3 лет назад

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

CVSS3: 9.8
nvd
больше 3 лет назад

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

CVSS3: 9.8
debian
больше 3 лет назад

There is a potential heap buffer overflow in Apache Hadoop libhdfs nat ...

EPSS

Процентиль: 79%
0.01194
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120
CWE-131
CWE-787