Lucene search
Veracode Vulnerability DatabaseVERACODE:7842HistoryNov 19, 2018 - 9:17 a.m.
Privilege Escalation
2018-11-1909:17:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
34.4%
hadoop-yarn-server-nodemanager is vulnerable to a privilege escalation. The library does not properly sanitize input from the LinuxContainerExecutor when running in a docker container, allowing authenticated user to run commands in the container as a root user.
References
github.com/apache/hadoop/commit/46940d92e2b17c627eb17a9d8fc6cec9c3715592
github.com/apache/hadoop/commit/b46cd315f7c81cfd89be40f1edacaf9a11282e15
github.com/apache/hadoop/compare/394589f38515655b55f9c4fbeaf03f41c0dd1355...b46cd315f7c81cfd89be40f1edacaf9a11282e15
mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E
Related
prion
prion
Input validation
2017-06-05 01:29:00
nvd
nvd
CVE-2017-7669
2017-06-05 01:29:00
osv
osv
Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation
2022-05-17 02:41:57
CVE-2017-7669
2017-06-05 01:29:00
cvelist
cvelist
CVE-2017-7669
2017-06-02 17:00:00
github
github
f5
f5
K12772312 : Apache Hadoop vulnerability CVE-2017-7669
2017-07-24 00:00:00
cve
cve
CVE-2017-7669
2017-06-05 01:29:00