Skip to contentApache Software Foundation Hadoop vulnerabilities
- apache hadoopApache Hadoop: Temporary File Local Information DisclosureCVE-2024-23454Fix available6.2 Medium
- apache hadoopPrivilege escalation in Apache Hadoop Yarn container-executor binary on Linux systemsCVE-2023-26031Fix available7.5 High
- apache hadoopApache Hadoop YARN remote code execution in ZKConfigurationStore of capacity schedulerCVE-2021-25642Public exploitFix available8.8 High
- apache hadoopCommand injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarCVE-2022-25168Fix available9.8 Critical
- apache hadoopApache Hadoop Privilege escalation vulnerabilityCVE-2021-33036Fix available8.8 High
- apache hadoopHeap buffer overflow in libhdfs native libraryCVE-2021-37404Fix available9.8 Critical
- apache hadoopArbitrary file write in FileUtil#unpackEntries on WindowsCVE-2022-26612Fix available9.8 Critical
- apache hadoop, solr, oracle financial services crime and compliance management studio +2 moreImproper Privilege Management in Apache HadoopCVE-2020-9492Fix available8.8 High
- apache hadoopAuthentication bypass in Apache HadoopCVE-2018-11764Fix available8.8 High
- apache hadoopImproper Authentication in Apache HadoopCVE-2018-11765Fix available7.5 High
- apache hadoopuser/group information can be corrupted across storing in fsimage and reading back from fsimageCVE-2018-11768Fix available7.5 High
- apache hadoopPrivilege escalation vulnerability in Apache HadoopCVE-2018-8029Fix available8.8 High
- apache hadoopImproper Privilege Management in org.apache.hadoop:hadoop-mainCVE-2018-11767Fix available7.4 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in HadoopCVE-2018-1296Fix available7.5 High
- apache hadoopArbitrary Command Execution in HadoopCVE-2018-11766Fix available8.8 High
- apache hadoopPath Traversal in HadoopCVE-2018-8009Fix available8.8 High
- apache hadoopExposure of Sensitive Information in HadoopCVE-2017-15718Fix available9.8 Critical
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-15713Fix available6.5 Medium
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-3166Fix available7.8 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2016-3086Fix available9.8 Critical
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2016-5001Fix available5.5 Medium
- apache hadoopApache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validationCVE-2017-7669Fix available7.5 High
- apache hadoopImproper Input Validation in Apache HadoopCVE-2017-3162Fix available7.3 High
- apache hadoopImproper Neutralization of Input During Web Page Generation in Apache HadoopCVE-2017-3161Fix available6.1 Medium
- apache hadoopImproper Access Control in Apache HadoopCVE-2016-5393Fix available8.8 High