Search for packages
| purl | pkg:maven/org.apache.hadoop/hadoop-common@0.23.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gx2c-fvhc-ph4j
Aliases: CVE-2022-26612 |
Path traversal in Hadoop In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility … |
Vulnerable |
|
GHSA-rmpj-7c96-mrg8
Aliases: CVE-2021-37404 |
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2 There is a potential heap buffer overflow in Apache Hadoop libhdfs native … |
Vulnerable |
|
GHSA-f5fw-25gw-5m92
Aliases: CVE-2024-23454 |
Apache Hadoop: Temporary File Local Information Disclosure Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If … |
Not vulnerable |
|
CVE-2021-37404
Aliases: GHSA-rmpj-7c96-mrg8 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') There is a potential heap buffer overflow … |
Vulnerable |
|
GHSA-9r7g-325h-mxrm
Aliases: CVE-2014-0229 |
Improper Authentication in Apache Hadoop Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x … |
Vulnerable Vulnerable |
|
GHSA-h24p-qwf4-84q8
Aliases: CVE-2017-7669 |
Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the … |
Vulnerable Vulnerable |
|
CVE-2018-8009
|
Path Traversal Apache Hadoop is exploitable via the zip slip vulnerability in locations that accept a zip file. |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-15713
|
Information Exposure Vulnerability in Apache Hadoop allows a cluster user to expose private files owned by the user running the … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-8r28-r8cp-g6cp
Aliases: CVE-2016-5001 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop This is an information disclosure vulnerability in Apache Hadoop … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-pxv5-5vmp-3jj4
Aliases: CVE-2013-2192 |
Improper Authentication in Apache Hadoop The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x … |
Vulnerable Vulnerable Vulnerable |