Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-37404

Heap buffer overflow in libhdfs native library

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Hadoop

  • 2.9.0 to 2.10.1affected
  • 3.0.0 to 3.1.4affected
  • 3.2.0 to 3.2.2affected
  • 3.3.0 to 3.3.1affected

References