IBM4D1F2AB4280D1E27F492393EDA89C0118872E3786543BFFDC996493376996CF7Security Bulletin: Vulnerability in Apache Hadoop affect Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2018-11768)
EPSS
Percentile
80.0%
Summary
There is a potential Buffer Errors vulnerability in Apache Hadoop (hadoop-hdfs) that affects Apache Solr
Vulnerability Details
CVEID:CVE-2018-11768
**DESCRIPTION:**Apache Hadoop is vulnerable to a denial of service, caused by a mismatch in the size of the fields used to store user/group information between memory and disk representation. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause the user/group information to be corrupted across storing in fsimage and reading back from fsimage.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/168305 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| Log Analysis | 1.3.1 |
| Log Analysis | 1.3.2 |
Log Analysis| 1.3.3
Log Analysis| 1.3.4
Log Analysis| 1.3.5
Log Analysis| 1.3.6
Remediation/Fixes
| Principal Product and Version(s) : | Fix details |
|---|---|
| IBM Operations Analytics - Log Analysis version 1.3.x | Upgrade to Log Analysis version 1.3.7 |
| Download the 1.3.7-TIV-IOALA-FP here |
Workarounds and Mitigations
None
Related
EPSS
Percentile
80.0%