Vulnerability-Lookup

CNVD-2018-10329

Vulnerability from cnvd - Published: 2018-05-25

Title

Apache Impala信息泄露漏洞（CNVD-2018-10329）

Description

Apache Impala(incubating)是美国阿帕奇（Apache）软件基金会的一套大规模、分布式并行处理的数据库查询系统。该系统能够查询存储在Hadoop（大数据分析软件）中的HDFS（分布式文件系统）和HBase（数据库）中的PB级大数据。 Apache Impala(incubating) 2.10.0之前的版本中存在安全漏洞。攻击者可通过更改表单属性，并将底层表映射到其他的Kudu表利用该漏洞访问任意的Kudu表单数据。

Severity

中

Patch Name

Apache Impala信息泄露漏洞（CNVD-2018-10329）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://issues.apache.org/jira/browse/IMPALA-5638

Reference

http://www.securityfocus.com/bid/101173

Impacted products

Name
Apache Impala (incubating) <2.10.0

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101173"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-9792",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9792"
    }
  },
  "description": "Apache Impala(incubating)\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u5927\u89c4\u6a21\u3001\u5206\u5e03\u5f0f\u5e76\u884c\u5904\u7406\u7684\u6570\u636e\u5e93\u67e5\u8be2\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u80fd\u591f\u67e5\u8be2\u5b58\u50a8\u5728Hadoop\uff08\u5927\u6570\u636e\u5206\u6790\u8f6f\u4ef6\uff09\u4e2d\u7684HDFS\uff08\u5206\u5e03\u5f0f\u6587\u4ef6\u7cfb\u7edf\uff09\u548cHBase\uff08\u6570\u636e\u5e93\uff09\u4e2d\u7684PB\u7ea7\u5927\u6570\u636e\u3002\r\n\r\nApache Impala(incubating) 2.10.0\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u66f4\u6539\u8868\u5355\u5c5e\u6027\uff0c\u5e76\u5c06\u5e95\u5c42\u8868\u6620\u5c04\u5230\u5176\u4ed6\u7684Kudu\u8868\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u4efb\u610f\u7684Kudu\u8868\u5355\u6570\u636e\u3002",
  "discovererName": "Matthew Jacobs.",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://issues.apache.org/jira/browse/IMPALA-5638",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-10329",
  "openTime": "2018-05-25",
  "patchDescription": "Apache Impala(incubating)\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u5927\u89c4\u6a21\u3001\u5206\u5e03\u5f0f\u5e76\u884c\u5904\u7406\u7684\u6570\u636e\u5e93\u67e5\u8be2\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u80fd\u591f\u67e5\u8be2\u5b58\u50a8\u5728Hadoop\uff08\u5927\u6570\u636e\u5206\u6790\u8f6f\u4ef6\uff09\u4e2d\u7684HDFS\uff08\u5206\u5e03\u5f0f\u6587\u4ef6\u7cfb\u7edf\uff09\u548cHBase\uff08\u6570\u636e\u5e93\uff09\u4e2d\u7684PB\u7ea7\u5927\u6570\u636e\u3002\r\n\r\nApache Impala(incubating) 2.10.0\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u66f4\u6539\u8868\u5355\u5c5e\u6027\uff0c\u5e76\u5c06\u5e95\u5c42\u8868\u6620\u5c04\u5230\u5176\u4ed6\u7684Kudu\u8868\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u4efb\u610f\u7684Kudu\u8868\u5355\u6570\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apache Impala\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-10329\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Apache Impala (incubating) \u003c2.10.0"
  },
  "referenceLink": "http://www.securityfocus.com/bid/101173",
  "serverity": "\u4e2d",
  "submitTime": "2018-05-21",
  "title": "Apache Impala\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-10329\uff09"
}

CVE-2017-9792 (GCVE-0-2017-9792)

Vulnerability from cvelistv5 – Published: 2017-10-03 01:00 – Updated: 2024-09-17 04:24

Summary

In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it "external" and then changing the underlying table mapping to point to other Kudu tables. This violates and works around the authorization requirement that creating a Kudu external table via Impala requires an "ALL" privilege at the server scope. This privilege requirement for "CREATE" commands is enforced to precisely avoid this scenario where a malicious user can change the underlying Kudu table mapping. The fix is to enforce the same privilege requirement for "ALTER" commands that would make existing non-external Kudu tables external.

Severity

No CVSS data available.

CWE

Information Disclosure

Assigner

apache mitre root Scorecard

References

3 references

URL	Tags
https://issues.apache.org/jira/browse/IMPALA-5638	x_refsource_CONFIRM
http://www.securityfocus.com/bid/101173	vdb-entryx_refsource_BID
https://lists.apache.org/thread.html/74a163df0cde…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Impala	Affected: 2.8.0 incubating Affected: 2.9.0 incubating

Date Public

2017-09-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:18:01.932Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.apache.org/jira/browse/IMPALA-5638"
          },
          {
            "name": "101173",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101173"
          },
          {
            "name": "[announce] 20170929 CVE-2017-9792 Apache Impala (incubating) Information Disclosure",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/74a163df0cdefcd738c8d18821e69aa69eed2ba5384c0cc255d15c4b%40%3Cannounce.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Apache Impala",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "2.8.0 incubating"
            },
            {
              "status": "affected",
              "version": "2.9.0 incubating"
            }
          ]
        }
      ],
      "datePublic": "2017-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Apache Impala (incubating) before 2.10.0, a malicious user with \"ALTER\" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it \"external\" and then changing the underlying table mapping to point to other Kudu tables. This violates and works around the authorization requirement that creating a Kudu external table via Impala requires an \"ALL\" privilege at the server scope. This privilege requirement for \"CREATE\" commands is enforced to precisely avoid this scenario where a malicious user can change the underlying Kudu table mapping. The fix is to enforce the same privilege requirement for \"ALTER\" commands that would make existing non-external Kudu tables external."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-06T09:57:01.000Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.apache.org/jira/browse/IMPALA-5638"
        },
        {
          "name": "101173",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101173"
        },
        {
          "name": "[announce] 20170929 CVE-2017-9792 Apache Impala (incubating) Information Disclosure",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/74a163df0cdefcd738c8d18821e69aa69eed2ba5384c0cc255d15c4b%40%3Cannounce.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "DATE_PUBLIC": "2017-09-29T00:00:00",
          "ID": "CVE-2017-9792",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apache Impala",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.8.0 incubating"
                          },
                          {
                            "version_value": "2.9.0 incubating"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apache Software Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Apache Impala (incubating) before 2.10.0, a malicious user with \"ALTER\" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it \"external\" and then changing the underlying table mapping to point to other Kudu tables. This violates and works around the authorization requirement that creating a Kudu external table via Impala requires an \"ALL\" privilege at the server scope. This privilege requirement for \"CREATE\" commands is enforced to precisely avoid this scenario where a malicious user can change the underlying Kudu table mapping. The fix is to enforce the same privilege requirement for \"ALTER\" commands that would make existing non-external Kudu tables external."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://issues.apache.org/jira/browse/IMPALA-5638",
              "refsource": "CONFIRM",
              "url": "https://issues.apache.org/jira/browse/IMPALA-5638"
            },
            {
              "name": "101173",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101173"
            },
            {
              "name": "[announce] 20170929 CVE-2017-9792 Apache Impala (incubating) Information Disclosure",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/74a163df0cdefcd738c8d18821e69aa69eed2ba5384c0cc255d15c4b@%3Cannounce.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2017-9792",
    "datePublished": "2017-10-03T01:00:00.000Z",
    "dateReserved": "2017-06-21T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:24:31.508Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-10329

CVE-2017-9792 (GCVE-0-2017-9792)

Tags

Sightings

Nomenclature

Related by attack behaviour