GHSA-hx83-rpqf-m267HighCVSS 7.5

user/group information can be corrupted across storing in fsimage and reading back from fsimage

Published
November 20, 2019
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-11768 →

📋 Description

In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.

🎯 Affected products3

  • maven/org.apache.hadoop:hadoop-main:>= 2.2.0, < 2.8.5
  • maven/org.apache.hadoop:hadoop-main:>= 2.9.0, < 2.9.2
  • maven/org.apache.hadoop:hadoop-main:>= 3.0.0, < 3.1.1

🔗 References (13)