CVE-2026-65181

概要

参考情報

• lists.apache.org/thread/2ty3srsh96j86xxg4g1hbo5rwvszwcnl · Mailing List
• openwall.com/lists/oss-security/2026/09/08/24 · Mailing List

impala のその他の脆弱性

• CVE-2026-90466中 6.5Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix ma…
• CVE-2026-57866高 8.8Server side request forgery in Apache Impala versions 4.4.x and 4.5.x.  Authenticated Impala users with permissions to execute the ai_genera…
• CVE-2026-56207緊急 9.8Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name …
• CVE-2026-54048中 5.3Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms all…
• CVE-2021-28131高 7.5Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the …