CVE-2021-37404: falha em Apache Hadoop
Heap buffer overflow in libhdfs native library
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.1%
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
Produtos afetados
Apache Software Foundation · Apache HadoopCVEs relacionadas — Apache Hadoop
No mesmo produto, das mais perigosas para as menos.
CVE-2018-8009—CVE-2018-8009EPSS 6.7%CVE-2017-3162—CVE-2017-3162EPSS 6.4%CVE-2022-25168—Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarEPSS 4.6%CVE-2022-26612—Arbitrary file write in FileUtil#unpackEntries on WindowsEPSS 4.2%CVE-2021-33036—Apache Hadoop Privilege escalation vulnerabilityEPSS 4.0%CVE-2017-3161—CVE-2017-3161EPSS 3.9%