| CVE-2024-23454 |
Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default
|
Non notée
|
25 sept. 2024 |
| CVE-2023-26031 |
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user…
|
Non notée
|
16 nov. 2023 |
| CVE-2021-25642 |
ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from…
|
Non notée
|
25 août 2022 |
| CVE-2022-25168 |
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell
|
Non notée
|
4 août 2022 |
| CVE-2021-33036 |
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate…
|
Non notée
|
15 juin 2022 |
| CVE-2021-37404 |
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code
|
Non notée
|
13 juin 2022 |
| CVE-2022-26612 |
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and…
|
Non notée
|
7 avr. 2022 |
| CVE-2018-1296 |
In Apache Hadoop 3.0.0-alpha1 to 3.0.0, 2.9.0, 2.8.0 to 2.8.3, and 2.5.0 to 2.7.5, HDFS exposes extended attribute…
|
Non notée
|
7 févr. 2019 |
| CVE-2018-11766 |
In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete
|
Non notée
|
27 nov. 2018 |
| CVE-2018-8009 |
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is…
|
Non notée
|
13 nov. 2018 |
| CVE-2017-15718 |
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the…
|
Non notée
|
24 janv. 2018 |
| CVE-2017-15713 |
Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1…
|
Non notée
|
19 janv. 2018 |
| CVE-2017-3166 |
In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with…
|
Non notée
|
13 nov. 2017 |
| CVE-2016-3086 |
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential…
|
Non notée
|
5 sept. 2017 |
| CVE-2016-5001 |
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the…
|
Non notée
|
30 août 2017 |
| CVE-2017-7669 |
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with…
|
Non notée
|
2 juin 2017 |
| CVE-2017-3161 |
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an…
|
Non notée
|
26 avr. 2017 |
| CVE-2017-3162 |
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace
|
Non notée
|
26 avr. 2017 |