Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hadoop/hadoop-common@0.23.0
purl pkg:maven/org.apache.hadoop/hadoop-common@0.23.0
Tags Ghost
Next non-vulnerable version 3.4.0
Latest non-vulnerable version 3.4.0
Risk score 3.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-9r7g-325h-mxrm
Aliases:
CVE-2014-0229
Improper Authentication in Apache Hadoop Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x …
0.23.11
Vulnerable
0.23.11
Vulnerable
CVE-2018-8009

Path Traversal Apache Hadoop is exploitable via the zip slip vulnerability in locations that accept a zip file.
2.7.7
Vulnerable
2.8.5
Vulnerable
2.9.2
Vulnerable
3.1.1
Vulnerable
2.7.7
Vulnerable
2.8.5
Vulnerable
2.9.2
Vulnerable
3.1.1
Vulnerable
CVE-2017-15713

Information Exposure Vulnerability in Apache Hadoop allows a cluster user to expose private files owned by the user running the …
2.8.3
Vulnerable
3.0.1
Vulnerable
2.8.3
Vulnerable
3.0.1
Vulnerable
GHSA-pxv5-5vmp-3jj4
Aliases:
CVE-2013-2192
Improper Authentication in Apache Hadoop The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x …
0.23.9
Vulnerable
0.23.9
Vulnerable
This package is not known to fix any advisories.