Search for packages
| purl | pkg:maven/org.apache.hadoop/hadoop-common@0.22.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gx2c-fvhc-ph4j
Aliases: CVE-2022-26612 |
Path traversal in Hadoop In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility … |
Vulnerable |
|
GHSA-rmpj-7c96-mrg8
Aliases: CVE-2021-37404 |
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2 There is a potential heap buffer overflow in Apache Hadoop libhdfs native … |
Vulnerable |
|
GHSA-f5fw-25gw-5m92
Aliases: CVE-2024-23454 |
Apache Hadoop: Temporary File Local Information Disclosure Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If … |
Not vulnerable |
|
CVE-2021-37404
Aliases: GHSA-rmpj-7c96-mrg8 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') There is a potential heap buffer overflow … |
Vulnerable |
|
GHSA-h24p-qwf4-84q8
Aliases: CVE-2017-7669 |
Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the … |
Vulnerable Vulnerable |
|
GHSA-8r28-r8cp-g6cp
Aliases: CVE-2016-5001 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop This is an information disclosure vulnerability in Apache Hadoop … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |