Lucene search
Veracode Vulnerability DatabaseVERACODE:21961HistoryNov 18, 2019 - 2:01 a.m.
Information Disclosure
2019-11-1802:01:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.007 Low
EPSS
Percentile
80.7%
apache arrow is vulnerable to information disclosure. The data read from Apache Parquet files with RLE null encoded data is uninitialized, potentially allowing data in memory to be unintentionally shared over the wire.
References
www.openwall.com/lists/oss-security/2019/11/08/1
github.com/apache/arrow/pull/5392
lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E
lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E
Related
github
github
Missing Initialization of Resource in Apache Arrow
2022-05-24 17:00:40
cve
cve
CVE-2019-12410
2019-11-08 19:15:10
osv
osv
PYSEC-2019-196
2019-11-08 19:15:00
Missing Initialization of Resource in Apache Arrow
2022-05-24 17:00:40
CVE-2019-12410
2019-11-08 19:15:10
nvd
nvd
CVE-2019-12410
2019-11-08 19:15:10
prion
prion
Design/Logic Flaw
2019-11-08 19:15:00
cvelist
cvelist
CVE-2019-12410
2019-11-08 18:04:52
