Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hadoop/hadoop-common@3.3.2
purl pkg:maven/org.apache.hadoop/hadoop-common@3.3.2
Next non-vulnerable version 3.4.0
Latest non-vulnerable version 3.4.0
Risk score 4.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-gx2c-fvhc-ph4j
Aliases:
CVE-2022-26612
Path traversal in Hadoop In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility …
3.3.3
Vulnerable
GHSA-8wm5-8h9c-47pc
Aliases:
CVE-2022-25168
Apache Hadoop argument injection vulnerability Apache Hadoop's `FileUtil.unTar(File, File)` API does not escape the input file name before being passed …
3.3.3
Vulnerable
GHSA-f5fw-25gw-5m92
Aliases:
CVE-2024-23454
Apache Hadoop: Temporary File Local Information Disclosure Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If …
3.4.0
Not vulnerable
CVE-2022-25168

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input …
2.10.2
Vulnerable
3.3.3
Vulnerable
3.2.4
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-rmpj-7c96-mrg8
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2 There is a potential heap buffer overflow in Apache Hadoop libhdfs native … CVE-2021-37404