Advisoriesby Ibis
Apache Hadoop security advisories
12 advisories · none critical or high in 12 months · latest Sep 25, 2024
12 advisories
Apache Hadoop: Temporary File Local Information DisclosureCVE-2024-23454fixed in 3.4.0Apache Hadoop argument injection vulnerabilityCVE-2022-25168fixed in 2.10.2 +2Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2CVE-2021-37404fixed in 2.10.2 +2Exposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2015-1776fixed in 2.6.5Improper Access Control in Apache HadoopCVE-2016-5393fixed in 2.6.5 +1Improper Authentication in Apache HadoopCVE-2013-2192fixed in 0.23.9 +1Improper Authentication in Apache HadoopCVE-2014-0229fixed in 0.23.11 +1Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validationCVE-2017-7669fixed in 2.8.1 +1Insecure Inherited Permissions in Apache HadoopCVE-2016-6811fixed in 2.7.4Exposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2016-5001fixed in 2.6.4 +1Path traversal in HadoopCVE-2022-26612fixed in 2.10.2 +2Improper Privilege Management in Apache HadoopCVE-2020-9492fixed in 2.10.1 +2About Apache Hadoop
Distributed storage and processing.
Packages watched: org.apache.hadoop:hadoop-common (Maven).