Description
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache Hadoop | Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, 2.0.0-alpha to 2.8.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.hadoop:hadoop-main | >= 2.2.0, < 2.8.5 | 2.8.5 | GHSA-hx83-rpqf-m267 |
| Maven | org.apache.hadoop:hadoop-main | >= 2.9.0, < 2.9.2 | 2.9.2 | GHSA-hx83-rpqf-m267 |
| Maven | org.apache.hadoop:hadoop-main | >= 3.0.0, < 3.1.1 | 3.1.1 | GHSA-hx83-rpqf-m267 |
Advisories 1
- WID-SEC-2025-0227 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
References
- https://lists.apache.org/thread.html/2067a797b330530a6932f4b08f703b3173253d0a2b7c8c524e54adaf%40%3Cgeneral.hadoop.apache.org%3E
- [hadoop-general] 20191004 Re:CVE-2018-11768: HDFS FSImage Corruption mailing-list
- [hadoop-hdfs-dev] 20191004 Re:CVE-2018-11768: HDFS FSImage Corruption mailing-list
- [hadoop-hdfs-dev] 20191004 Re: CVE-2018-11768: HDFS FSImage Corruption mailing-list
- [hadoop-hdfs-dev] 20191006 Re: CVE-2018-11768: HDFS FSImage Corruption mailing-list
- [lucene-dev] 20191029 Re: CVE-2018-11768 in regards to Solr mailing-list
- [lucene-dev] 20191029 CVE-2018-11768 in regards to Solr mailing-list
- [lucene-dev] 20191031 RE: CVE-2018-11768 in regards to Solr mailing-list
- [flink-dev] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version mailing-list
- [flink-user] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version mailing-list