Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.0
purl pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.0
Next non-vulnerable version 2.10.1
Latest non-vulnerable version 3.2.2
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2016-5001

This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature …
2.6.5
Vulnerable
2.7.2
Vulnerable
2.7.3
Vulnerable
2.7.4
Vulnerable
2.7.7
Vulnerable
2.8.0
Vulnerable
2.8.4
Vulnerable
2.8.5
Vulnerable
2.9.0
Vulnerable
2.9.2
Vulnerable
2.10.0
Vulnerable
3.1.0
Vulnerable
3.1.1
Vulnerable
3.1.3
Vulnerable
3.2.0
Vulnerable
3.2.1
Vulnerable
CVE-2018-11768

In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can …
2.8.5
Vulnerable
2.9.2
Vulnerable
2.10.0
Vulnerable
3.1.3
Vulnerable
3.2.1
Vulnerable
CVE-2020-9492

Improper Privilege Management In Apache Hadoop to to to, WebHDFS client might send SPNEGO authorization header to remote URL without …
2.10.1
Not vulnerable
3.1.4
Not vulnerable
3.2.2
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2014-0229
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check …
CVE-2017-3161
Cross-site Scripting The HDFS web UI in Apache Hadoop is vulnerable to a cross-site scripting (XSS) attack through an unescaped …
CVE-2017-3162
Improper Input Validation HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace