Search for packages
| purl | pkg:maven/org.apache.hadoop/hadoop-common@3.2.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gx2c-fvhc-ph4j
Aliases: CVE-2022-26612 |
Path traversal in Hadoop In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility … |
Vulnerable |
|
GHSA-rmpj-7c96-mrg8
Aliases: CVE-2021-37404 |
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2 There is a potential heap buffer overflow in Apache Hadoop libhdfs native … |
Vulnerable |
|
GHSA-8wm5-8h9c-47pc
Aliases: CVE-2022-25168 |
Apache Hadoop argument injection vulnerability Apache Hadoop's `FileUtil.unTar(File, File)` API does not escape the input file name before being passed … |
Vulnerable |
|
GHSA-f5fw-25gw-5m92
Aliases: CVE-2024-23454 |
Apache Hadoop: Temporary File Local Information Disclosure Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If … |
Not vulnerable |
|
CVE-2022-25168
|
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-37404
Aliases: GHSA-rmpj-7c96-mrg8 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') There is a potential heap buffer overflow … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-f8vc-wfc8-hxqh
|
Improper Privilege Management in Apache Hadoop In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS … |
CVE-2020-9492
|
|
CVE-2020-9492
|
Incorrect Authorization In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO … |
GHSA-f8vc-wfc8-hxqh
|