https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:06:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08364 bdu:2023-08364 https://cve.radiocsirt.org/vuln/bdu:2023-08364 https://cve.radiocsirt.org/vuln/euvd-2026-216338 EUVD-2026-216338 https://cve.radiocsirt.org/vuln/euvd-2026-216338 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26031 <p>Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote users to gain root privileges.</p> <p>Hadoop 3.3.0 updated the &#34; YARN Secure Containers https://hadoop.apache.org/docs/stable/hadoop-yarn/hadoop-yarn-site/SecureContainer.html &#34; to add a feature for executing user-submitted applications in isolated linux containers.</p> <p>The native binary HADOOP_HOME/bin/container-executor is used to launch these containers; it must be owned by root and have the suid bit set in order for the YARN processes to run the containers as the specific users submitting the jobs.</p> <p>The patch &#34; YARN-10495 https://issues.apache.org/jira/browse/YARN-10495 . make the rpath of container-executor configurable&#34; modified the library loading path for loading .so files from &#34;$ORIGIN/&#34; to &#34;&#34;$ORIGIN/:../lib/native/&#34;. This is the a path through which libcrypto.so is located. Thus it is is possible for a user with reduced privileges to install a malicious libcrypto library into a path to which they have write access, invoke the container-executor command, and have their modified library executed as root. If the YARN cluster is accepting work from remote (authenticated) users, and these users&#39; submitted job are executed in the physical host, rather than a container, then the CVE permits remote users to gain root privileges.</p> <p>The fix for the…</p> <p>Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote users to gain root privileges.</p> <p>Hadoop 3.3.0 updated the &#34; YARN Secure Containers https://hadoop.apache.org/docs/stable/hadoop-yarn/hadoop-yarn-site/SecureContainer.html &#34; to add a feature for executing user-submitted applications in isolated linux containers.</p> <p>The native binary HADOOP_HOME/bin/container-executor is used to launch these containers; it must be owned by root and have the suid bit set in order for the YARN processes to run the containers as the specific users submitting the jobs.</p> <p>The patch &#34; YARN-10495 https://issues.apache.org/jira/browse/YARN-10495 . make the rpath of container-executor configurable&#34; modified the library loading path for loading .so files from &#34;$ORIGIN/&#34; to &#34;&#34;$ORIGIN/:../lib/native/&#34;. This is the a path through which libcrypto.so is located. Thus it is is possible for a user with reduced privileges to install a malicious libcrypto library into a path to which they have write access, invoke the container-executor command, and have their modified library executed as root. If the YARN cluster is accepting work from remote (authenticated) users, and these users&#39; submitted job are executed in the physical host, rather than a container, then the CVE permits remote users to gain root privileges.</p> <p>The fix for the…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26031 https://cve.radiocsirt.org/vuln/ghsa-94jh-j374-9r3j <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-project</p> <p>Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote users to gain root privileges.</p> <p>Hadoop 3.3.0 updated the &#34; YARN Secure Containers https://hadoop.apache.org/docs/stable/hadoop-yarn/hadoop-yarn-site/SecureContainer.html &#34; to add a feature for executing user-submitted applications in isolated linux containers.</p> <p>The native binary HADOOP_HOME/bin/container-executor is used to launch these containers; it must be owned by root and have the suid bit set in order for the YARN processes to run the containers as the specific users submitting the jobs.</p> <p>The patch &#34; YARN-10495 https://issues.apache.org/jira/browse/YARN-10495 . make the rpath of container-executor configurable&#34; modified the library loading path for loading .so files from &#34;$ORIGIN/&#34; to &#34;&#34;$ORIGIN/:../lib/native/&#34;. This is the a path through which libcrypto.so is located. Thus it is is possible for a user with reduced privileges to install a malicious libcrypto library into a path to which they have write access, invoke the container-executor command, and have their modified library executed as root. If the YARN cluster is accepting work from remote (authenticated) users, and these users&#39; submitted job are executed in the physical host, rather than a container, then the CVE permits remote users to gain root privileges.</p> <p>The fix for the…</p> <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-project</p> <p>Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote users to gain root privileges.</p> <p>Hadoop 3.3.0 updated the &#34; YARN Secure Containers https://hadoop.apache.org/docs/stable/hadoop-yarn/hadoop-yarn-site/SecureContainer.html &#34; to add a feature for executing user-submitted applications in isolated linux containers.</p> <p>The native binary HADOOP_HOME/bin/container-executor is used to launch these containers; it must be owned by root and have the suid bit set in order for the YARN processes to run the containers as the specific users submitting the jobs.</p> <p>The patch &#34; YARN-10495 https://issues.apache.org/jira/browse/YARN-10495 . make the rpath of container-executor configurable&#34; modified the library loading path for loading .so files from &#34;$ORIGIN/&#34; to &#34;&#34;$ORIGIN/:../lib/native/&#34;. This is the a path through which libcrypto.so is located. Thus it is is possible for a user with reduced privileges to install a malicious libcrypto library into a path to which they have write access, invoke the container-executor command, and have their modified library executed as root. If the YARN cluster is accepting work from remote (authenticated) users, and these users&#39; submitted job are executed in the physical host, rather than a container, then the CVE permits remote users to gain root privileges.</p> <p>The fix for the…</p> https://cve.radiocsirt.org/vuln/ghsa-94jh-j374-9r3j https://cve.radiocsirt.org/vuln/gsd-2023-26031 gsd-2023-26031 https://cve.radiocsirt.org/vuln/gsd-2023-26031 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2954 <p>Ein lokaler Angreifer kann eine Schwachstelle in Apache Hadoop ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Apache Hadoop ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2954