CVE-2021-41561 Apache Parquet-MR potential DoS in case of malicious Parquet file

2021-12-2011:20:11

CWE-20

apache

www.cve.org

cve-2021-41561

apache parquet

dos

input validation

vulnerability

parquet-mr

EPSS

0.001

Percentile

42.0%

JSON

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

CNA Affected

[
  {
    "product": "Apache Parquet",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "Parquet-MR*",
        "status": "affected",
        "version": "1.9.0",
        "versionType": "custom"
      }
    ]
  }
]