CVE-2017-3162

CVE-2017-3162: vulnerability in Apache Hadoop

Published · Updated

Follow this CVE+ Monitor Apache Hadoop+ Monitor org.apache.hadoop:hadoop-client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.4%
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0.
Affected products
Apache Software Foundation · Apache Hadoop
Related CVEs — Apache Hadoop

In the same product, most dangerous first.

CVE-2018-8009—CVE-2018-8009EPSS 6.7%CVE-2022-25168—Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarEPSS 4.6%CVE-2022-26612—Arbitrary file write in FileUtil#unpackEntries on WindowsEPSS 4.2%CVE-2021-33036—Apache Hadoop Privilege escalation vulnerabilityEPSS 4.0%CVE-2017-3161—CVE-2017-3161EPSS 3.9%CVE-2016-3086—CVE-2016-3086EPSS 3.6%