Search for packages
| purl | pkg:maven/org.apache.hive/hive-exec@1.2.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-1320
|
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An … | There are no reported fixed by versions. |
|
CVE-2018-11777
|
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if … | There are no reported fixed by versions. |
|
CVE-2018-1284
|
In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath_int/xpath_short) to expose the content of a … | There are no reported fixed by versions. |
|
CVE-2018-10237
|
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks … | There are no reported fixed by versions. |
|
GHSA-c476-j253-5rgq
Aliases: CVE-2024-29869 |
Apache Hive Incorrectly Assigns Permissions for a Critical Resource Hive creates a credentials file to a temporary directory in the … |
Not vulnerable |
|
GHSA-rrfq-g5fq-fc9c
Aliases: CVE-2018-11777 |
Improper Authentication in hive:hive-exec In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected … |
Vulnerable Vulnerable |
|
GHSA-rxmr-c9jm-7mm8
Aliases: CVE-2018-1284 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might … |
Vulnerable Vulnerable |
|
GHSA-83r3-c79w-f6wc
Aliases: CVE-2015-7521 |
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 … |
Vulnerable Vulnerable |
|
GHSA-gf2v-9hp6-44qg
Aliases: CVE-2016-3083 |
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and … |
Vulnerable Vulnerable |