← Back

CVE-2018-11768

nvd nist
Published: Oct 4, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.

Affected (27)

Products: Apache: Hadoop
1 product
Hadoop
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Apache
From 2.2.0 to 2.8.4
From 2.9.0 to 2.9.1
From 3.0.1 to 3.0.3
From 3.1.0 to 3.1.1
Version 2.0.0
Version 2.0.0 alpha
Version 2.0.1
Version 2.0.1 alpha
Version 2.0.2
Version 2.0.2 alpha
Version 2.0.3
Version 2.0.3 alpha
Version 2.0.4
Version 2.0.4 alpha
Version 2.0.5
Version 2.0.5 alpha
Version 2.0.6
Version 2.0.6 alpha
Version 2.1.0
Version 2.1.0 beta
Version 2.1.1 beta
Version 3.0.0
Version 3.0.0 alpha1
Version 3.0.0 alpha2
Version 3.0.0 alpha3
Version 3.0.0 alpha4
Version 3.0.0 beta1

References (20)

Timeline

No history available yet.