| CVE-2024-23454 |
Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default
|
Not rated
|
Sep 25, 2024 |
| CVE-2023-26031 |
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user…
|
Not rated
|
Nov 16, 2023 |
| CVE-2021-25642 |
ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from…
|
Not rated
|
Aug 25, 2022 |
| CVE-2022-25168 |
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell
|
Not rated
|
Aug 4, 2022 |
| CVE-2021-33036 |
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate…
|
Not rated
|
Jun 15, 2022 |
| CVE-2021-37404 |
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code
|
Not rated
|
Jun 13, 2022 |
| CVE-2022-26612 |
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and…
|
Not rated
|
Apr 7, 2022 |
| CVE-2018-1296 |
In Apache Hadoop 3.0.0-alpha1 to 3.0.0, 2.9.0, 2.8.0 to 2.8.3, and 2.5.0 to 2.7.5, HDFS exposes extended attribute…
|
Not rated
|
Feb 7, 2019 |
| CVE-2018-11766 |
In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete
|
Not rated
|
Nov 27, 2018 |
| CVE-2018-8009 |
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is…
|
Not rated
|
Nov 13, 2018 |
| CVE-2017-15718 |
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the…
|
Not rated
|
Jan 24, 2018 |
| CVE-2017-15713 |
Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1…
|
Not rated
|
Jan 19, 2018 |
| CVE-2017-3166 |
In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with…
|
Not rated
|
Nov 13, 2017 |
| CVE-2016-3086 |
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential…
|
Not rated
|
Sep 5, 2017 |
| CVE-2016-5001 |
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the…
|
Not rated
|
Aug 30, 2017 |
| CVE-2017-7669 |
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with…
|
Not rated
|
Jun 2, 2017 |
| CVE-2017-3161 |
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an…
|
Not rated
|
Apr 26, 2017 |
| CVE-2017-3162 |
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace
|
Not rated
|
Apr 26, 2017 |