Lucene search
Veracode Vulnerability DatabaseVERACODE:33416HistoryDec 21, 2021 - 7:16 a.m.
Improper Input Validation
2021-12-2107:16:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
apache parquet
improper input validation
service disruption
EPSS
0.001
Percentile
42.0%
Apache Parquet is vulnerable to improper input validation. The vulnerability exits in util.java of parquet-mr which allows an attacker to perform service disruption using malicious parquet files.
References
www.openwall.com/lists/oss-security/2021/12/20/1
git-wip-us.apache.org/repos/asf?p=parquet-mr.git;a=commit;h=1695d92cc07288713a9f2230f3aac61e2dc6a8e4
github.com/apache/parquet-mr/commit/d022451f5e58e86b39f0a312d6251a0dc6bb7468
github.com/apache/parquet-mr/pull/933
issues.apache.org/jira/browse/PARQUET-2094
lists.apache.org/thread/1bjlscbqtfzl160hrm9lnpjpppp5z3zr
www.openwall.com/lists/oss-security/2021/12/20/1
Related
osv
osv
Improper Input Validation in Parquet-MR
2022-01-06 23:59:25
CVE-2021-41561
2021-12-20 12:15:07
cve
cve
CVE-2021-41561
2021-12-20 12:15:07
nvd
nvd
CVE-2021-41561
2021-12-20 12:15:07
github
github
Improper Input Validation in Parquet-MR
2022-01-06 23:59:25
cnvd
cnvd
Apache Parquet Input Validation Error Vulnerability
2022-01-05 00:00:00
cvelist
cvelist
ibm
ibm
prion
prion
Input validation
2021-12-20 12:15:00