CVE-2017-7669
1 advisory.
Maven/org.apache.hadoop:hadoop-common CVE-2017-7669: high 7.5, EPSS 1.80%
Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation
Action: Upgrade org.apache.hadoop:hadoop-common to 2.8.1 (2.x) or 3.0.0-alpha3 (3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.1 | - |
| 3.0.0-alpha1 | 3.0.0-alpha3 | - |
Fixed versions
| 2.8.1 | 3.0.0-alpha3 |
Sources
- osv: GHSA-h24p-qwf4-84q8
- https://nvd.nist.gov/vuln/detail/CVE-2017-7669
- https://mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E
- http://www.securityfocus.com/bid/98795
CVE-2017-7669 · published · modified · JSON