~ / search / GHSA-pr9x-qmp5-j3rr

GHSA-pr9x-qmp5-j3rr

Improper Input Validation in Apache Hadoop

Source: GitHub Advisory Database (reviewed) High CVE-2017-3162

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.hadoop:hadoop-client < 2.7.0 2.7.0

Details

As written in the advisory (Markdown source, shown as plain text).

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0.

References

External links from the advisory. They lead to third-party sites.