pkg:maven/org.apache.hadoop/hadoop-client
Type
maven
Namespace
org.apache.hadoop
Name
hadoop-client
Known advisories, vulnerabilities and fixes for org.apache.hadoop/hadoop-client package.
Critical
1
High
2
Moderate
2
| Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
|---|---|---|---|---|---|---|---|
| Affected | >= 2.0.0, < 2.5.2 >= 0.23.0, < 1.0.1 |
CVE-2014-3627
|
 MAVEN:GHSA-JPMF-8CJ2-595G
|
Improper Link Resolution Before File Access in Apache Hadoop | moderate |
2022-05-17T04:20:31
(2 years ago) |
|
| Fixed | = 2.5.2 = 1.0.1 |
CVE-2014-3627
|
MAVEN:GHSA-JPMF-8CJ2-595G
|
Improper Link Resolution Before File Access in Apache Hadoop | moderate |
2022-05-17T04:20:31
(2 years ago) |
|
| Affected | <= 2.6.5 |
CVE-2017-3162
|
MAVEN:GHSA-PR9X-QMP5-J3RR
|
Improper Input Validation in Apache Hadoop | high |
2022-05-13T01:08:56
(2 years ago) |
|
| Fixed | = 2.7.0 |
CVE-2017-3162
|
MAVEN:GHSA-PR9X-QMP5-J3RR
|
Improper Input Validation in Apache Hadoop | high |
2022-05-13T01:08:56
(2 years ago) |
|
| Affected | >= 2.0.0, < 2.0.2 >= 1.0.0, < 1.0.4 < 0.23.4 |
CVE-2012-4449
|
MAVEN:GHSA-Q46V-CJ5V-HVG6
|
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop | critical |
2022-05-17T00:22:31
(2 years ago) |
|
| Fixed | = 2.0.2 = 1.0.4 = 0.23.4 |
CVE-2012-4449
|
MAVEN:GHSA-Q46V-CJ5V-HVG6
|
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop | critical |
2022-05-17T00:22:31
(2 years ago) |
|
| Affected | <= 2.6.5 |
CVE-2017-3161
|
MAVEN:GHSA-QM7F-R83W-3P46
|
Improper Neutralization of Input During Web Page Generation in Apache Hadoop | moderate |
2022-05-13T01:08:56
(2 years ago) |
|
| Fixed | = 2.7.0 |
CVE-2017-3161
|
MAVEN:GHSA-QM7F-R83W-3P46
|
Improper Neutralization of Input During Web Page Generation in Apache Hadoop | moderate |
2022-05-13T01:08:56
(2 years ago) |
|
| Affected | = 2.0.0-alpha |
CVE-2012-3376
|
MAVEN:GHSA-QMH2-H7R6-GM6Q
|
Client BlockTokens not checked in Apache Hadoop | high |
2022-05-17T02:54:07
(2 years ago) |
|
| Fixed | = 2.0.1-alpha |
CVE-2012-3376
|
MAVEN:GHSA-QMH2-H7R6-GM6Q
|
Client BlockTokens not checked in Apache Hadoop | high |
2022-05-17T02:54:07
(2 years ago) |