Insecure Inherited Permissions in Apache Hadoop

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-6811 · ADVISORY
• lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307@%3Cgeneral.hadoop.apache.org%3E · WEB
• lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307%40%3Cgeneral.hadoop.apache.org%3E

org.apache.hadoop:hadoop-common のその他の脆弱性

• CVE-2024-23454中 6.2Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, al…
• CVE-2022-25168緊急 9.8Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject …
• CVE-2021-37404緊急 9.8There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may …
• CVE-2022-26612緊急 9.8In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a resul…
• CVE-2020-9492高 8.8In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to …