trino-plugin-elasticsearch

87 results · Feed

• High 7.5
  CVE-2021-22569 Public exploit

  Denial of Service of protobuf-java parsing procedure

  An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

  Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Azure Linux Wolfi Maven RubyGems
  Jan 7, 2022
• High 7.5
  CVE-2020-13949

  Uncontrolled Resource Consumption in Apache Thrift

  In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

  druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Alpine Wolfi Maven
  Feb 12, 2021
• Medium 5.3
  CVE-2020-13956

  Cross-site scripting in Apache HttpClient

  Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

  druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Wolfi Maven
  Dec 2, 2020
• High 7.5
  CVE-2019-0205 Public exploit

  Loop with Unreachable Exit Condition in Apache Thrift

  In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

  Apache Apache Thrift druid trino Debian Azure Linux Wolfi Maven
  Oct 28, 2019
• High 7.3
  CVE-2019-10086 EPSS 29%

  Insecure Deserialization in Apache Commons Beanutils

  In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default chara…

  Apache Apache Commons Beanutils trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Aug 20, 2019
• Medium 6.5
  CVE-2018-11798

  Apache Thrift Node.js static web server sandbox escape

  The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

  Apache Software Foundation Apache Thrift druid trino Debian Wolfi Maven
  Jan 7, 2019
• Medium —
  CVE-2012-5783

  Improper Certificate Validation in Apache Commons HttpClient

  Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

  trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Wolfi Maven
  Nov 4, 2012