Skip to content
OpenAdvisories

Package · Maven

org.apache.hive:hive-llap-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-23953

    Apache Hive: Timing Attack Against Signature in LLAP util

    Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid signature for an arbitrary message byte by byte. The attacker should be an authorized user of the product to perform this attack. Users are …

    Apache Software Foundation Apache Hive org.apache.hive:hive-llap-common Maven