Maven/org.apache.hadoop:hadoop-yarn-project CVE-2023-26031: high 7.5, EPSS 2.09%
Apache Hadoop allows local user to gain root privileges
Action: Upgrade org.apache.hadoop:hadoop-yarn-project to 3.3.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.1 | 3.3.5 | - |
Fixed versions
| 3.3.5 |
Sources
- osv: GHSA-94jh-j374-9r3j
- https://nvd.nist.gov/vuln/detail/CVE-2023-26031
- https://github.com/apache/hadoop/commit/10e7ca481c8cd0548d903d39d8581291e533bf12
- https://github.com/apache/hadoop/commit/7d3c8ef6064efd132828765e52e961977aebbf47
- https://github.com/apache/hadoop
- https://hadoop.apache.org/cve_list.html
- https://issues.apache.org/jira/browse/YARN-11441
- https://lists.apache.org/thread/q9qpdlv952gb4kphpndd5phvl7fkh71r
- https://security.netapp.com/advisory/ntap-20240112-0001
CVE-2023-26031 · published · modified · JSON