Medium WID-SEC-2023-2954 1 CVE

Apache Hadoop: Schwachstelle ermöglicht Privilegieneskalation

Published Nov 16, 2023 · Updated Nov 16, 2023 · de-DE

Vendor: Apache Product: Hadoop < 3.3.5 Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Apache Hadoop ausnutzen, um seine Privilegien zu erhöhen.

Product

Apache Hadoop ist eine verteilte Big Data Plattform.

Vulnerabilities 1

High 7.5

CVE-2023-26031

Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems

Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote users to gain root …

Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-yarn-project Maven

Nov 16, 2023

Revision history

2023-11-16 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-94jh-j374-9r3j vom 2023-11-16
https://github.com/advisories/GHSA-94jh-j374-9r3j