Описание
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
A flaw was found in Apache Hadoop. Opening a file path provided by a user without validation may result in a denial of service or arbitrary code execution.
Отчет
This package is a transitive dependency and is not used directly in the Red Hat products. Hence, it is categorized as a Moderate impact.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Fuse 7 | hadoop-hdfs | Not affected | ||
| Red Hat JBoss Fuse 6 | hadoop-hdfs | Out of support scope | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-hadoop | Fix deferred | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-hive | Fix deferred | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-presto | Fix deferred |
Показывать по
Дополнительная информация
Статус:
9.8 Critical
CVSS3
Связанные уязвимости
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
There is a potential heap buffer overflow in Apache Hadoop libhdfs nat ...
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2
9.8 Critical
CVSS3