org.apache.hadoop:hadoop-common vulnerabilities

3.4.2

13 years ago

28 days ago

Direct Vulnerabilities

Known vulnerabilities in the org.apache.hadoop:hadoop-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Creation of Temporary File in Directory with Insecure Permissions	[,3.4.0)
C Arbitrary Code Execution	[2.0.0,2.10.2)[3.0.0-alpha,3.2.4)[3.3.0,3.3.3)
C Arbitrary File Write via Archive Extraction (Zip Slip)	[,2.10.2)[3.0.0-alpha1,3.2.3)[3.3.0,3.3.3-RC0)
M Information Exposure	[3.0.0-alpha2,3.0.1)[2.8.0,2.10.0)
C Arbitrary File Write via Archive Extraction (Zip Slip)	[2.7.0,2.7.7)[2.8.0,2.8.5)[2.9.0,2.9.2)[3.0.0,3.0.3)[3.1.0,3.1.1)
M Information Exposure	[,2.8.3)[3.0.0-alpha,3.0.0)
C Information Exposure	[2.7.3,2.7.5)
C Cryptographic Weakness	[,0.23.4)[2.0.0-alpha,2.0.2-alpha)
H Privilege Escalation	[2.8.0,2.8.1)[3.0.0-alpha1,3.0.0-alpha3)
C Information Exposure	[,2.6.5)[2.7.0,2.7.3)
H Improper Access Control	[2.6.0,2.6.5)[2.7.0,2.7.3)
M Improper Authentication	[0.23.0,0.23.9)

82 VERSIONS IN TOTAL