Skip to content
fr Sign in
Not rated

CVE-2017-3166 In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with…

Description

In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file.

Affected products and versions

Product Affected versions Fixed in
Apache Hadoop Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache Hadoop

The 18 CVEs of Apache Hadoop →
CVE-2024-23454 Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default Not rated CVE-2023-26031 Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user… Not rated CVE-2021-25642 ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from… Not rated CVE-2022-25168 Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell Not rated
Track this CVE