Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hadoop/hadoop-hdfs@2.9.2
purl pkg:maven/org.apache.hadoop/hadoop-hdfs@2.9.2
Next non-vulnerable version 2.10.1
Latest non-vulnerable version 3.2.2
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2020-9492

Improper Privilege Management In Apache Hadoop to to to, WebHDFS client might send SPNEGO authorization header to remote URL without …
2.10.1
Not vulnerable
3.1.4
Not vulnerable
3.2.2
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2014-0229
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check …
CVE-2016-5001
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature …
CVE-2018-11768
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can …