https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:23:23 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/cnvd-2022-51057 cnvd-2022-51057 https://cve.radiocsirt.org/vuln/cnvd-2022-51057 https://cve.radiocsirt.org/vuln/euvd-2026-29731 EUVD-2026-29731 https://cve.radiocsirt.org/vuln/euvd-2026-29731 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37404 <p>There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> <p>There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37404 https://cve.radiocsirt.org/vuln/ghsa-rmpj-7c96-mrg8 <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-common</p> <p>There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-common</p> <p>There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-rmpj-7c96-mrg8 https://cve.radiocsirt.org/vuln/gsd-2021-37404 gsd-2021-37404 https://cve.radiocsirt.org/vuln/gsd-2021-37404 https://cve.radiocsirt.org/vuln/oesa-2022-2092 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hadoop, openEuler:20.03-LTS-SP3: hadoop, openEuler:22.03-LTS: hadoop</p> <p>Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn&amp;apos;t resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3(CVE-2022-26612) There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.(CVE-2021-37404) Apache Hadoop&amp;apos;s FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands.…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hadoop, openEuler:20.03-LTS-SP3: hadoop, openEuler:22.03-LTS: hadoop</p> <p>Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn&amp;apos;t resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3(CVE-2022-26612) There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.(CVE-2021-37404) Apache Hadoop&amp;apos;s FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands.…</p> https://cve.radiocsirt.org/vuln/oesa-2022-2092 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794