Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-exec@2.3.3
purl pkg:maven/org.apache.hive/hive-exec@2.3.3
Next non-vulnerable version 4.0.1
Latest non-vulnerable version 4.0.1
Risk score 3.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2018-1320

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An … There are no reported fixed by versions.
GHSA-c476-j253-5rgq
Aliases:
CVE-2024-29869
Apache Hive Incorrectly Assigns Permissions for a Critical Resource Hive creates a credentials file to a temporary directory in the …
4.0.1
Not vulnerable
GHSA-rrfq-g5fq-fc9c
Aliases:
CVE-2018-11777
Improper Authentication in hive:hive-exec In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected …
2.3.4
Vulnerable
2.3.4
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-rxmr-c9jm-7mm8
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might … CVE-2018-1284
GHSA-p639-xxv5-j383
Incorrect Permission Assignment for Critical Resource in Apache hive In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement … CVE-2018-1315