Lucene search
K

CVE-2018-8009

🗓️ 13 Nov 2018 21:00:00Reported by apacheType 
cve
 cve
🔗 web.nvd.nist.gov👁 124 Views

Apache Hadoop vulnerable to zip slip in multiple versions allowing exploitation via zip files.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product
20 May 202014:01
ibm
IBM Security Bulletins
Security Bulletin: IBM QRadar Incident Forensics is vulnerable to using component with known vulnerabilities
7 Oct 202020:58
ibm
IBM Security Bulletins
Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®
19 Apr 202116:53
ibm
IBM Security Bulletins
Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop
17 May 202321:55
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics
29 Apr 202501:54
ibm
IBM Security Bulletins
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)
11 Apr 202215:17
ibm
IBM Security Bulletins
Security Bulletin: Due to use of Spark from Hadoop, IBM Cloud Pak for Multicloud Management Monitoring could allow a remote attacker to traverse directories on the system.
5 Sep 202310:36
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.
10 Mar 202121:20
ibm
Broadcom
BSA-2018-662
21 Jun 201800:00
broadcom
CNVD
Apache Hadoop Arbitrary File Write Vulnerability
15 Nov 201800:00
cnvd
Rows per page
NVD
Vulners
Node
apachehadoopRange0.23.00.23.11
OR
apachehadoopRange2.0.02.7.6
OR
apachehadoopRange2.8.02.8.4
OR
apachehadoopRange2.9.02.9.1
OR
apachehadoopRange3.0.03.0.2
OR
apachehadoopMatch2.0.0alpha
OR
apachehadoopMatch3.0.0alpha1
OR
apachehadoopMatch3.0.0alpha2
OR
apachehadoopMatch3.0.0alpha3
OR
apachehadoopMatch3.0.0alpha4
OR
apachehadoopMatch3.0.0beta1
OR
apachehadoopMatch3.1.0
[
  {
    "product": "Apache Hadoop",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:13Current
8.3High risk
Vulners AI Score8.3
CVSS 26.5
CVSS 38.8
EPSS0.04616
124