CVE-2026-56207

概要

参考情報

• lists.apache.org/thread/20cov78py0zqzx7dyq39ktythkwn91zs · Mailing List
• openwall.com/lists/oss-security/2026/09/08/22 · Mailing List

impala のその他の脆弱性

• CVE-2026-90466中 6.5Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix ma…
• CVE-2026-65181高 8.1Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and cr…
• CVE-2026-57866高 8.8Server side request forgery in Apache Impala versions 4.4.x and 4.5.x.  Authenticated Impala users with permissions to execute the ai_genera…
• CVE-2026-54048中 5.3Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms all…
• CVE-2021-28131高 7.5Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the …