Lucene search

K
osvGoogleOSV:CVE-2017-7669
HistoryJun 05, 2017 - 1:29 a.m.

CVE-2017-7669

2017-06-0501:29:00
Google
osv.dev
6

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%