Lucene search

K
osvGoogleOSV:GHSA-H24P-QWF4-84Q8
HistoryMay 17, 2022 - 2:41 a.m.

Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation

2022-05-1702:41:57
Google
osv.dev
6

0.001 Low

EPSS

Percentile

34.6%

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root. This issue is fixed in versions 2.8.1 and 3.0.0-alpha3.

0.001 Low

EPSS

Percentile

34.6%

Related for OSV:GHSA-H24P-QWF4-84Q8