Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2012-3376

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
apache / hadoop 2.0.0-alpha 2.0.0-alpha.x
org.apache.hadoop / hadoop-client 2.0.0-alpha 2.0.0-alpha.x
org.apache.hadoop / hadoop-client 2.0.0-alpha 2.0.1-alpha