CVE-2022-34916

🗓️ 21 Aug 2022 08:15:19Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 116 Views

Apache Flume 1.4.0 - 1.10.0 RCE vulnerability via JMS Source with JNDI LDAP data source UR

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-34916	21 Aug 202209:15	–	attackerkb
CNNVD	Apache Flume 输入验证错误漏洞	21 Aug 202200:00	–	cnnvd
CNVD	Apache Flume input validation error vulnerability	24 Aug 202200:00	–	cnvd
Cvelist	CVE-2022-34916 Improper Input Validation (JNDI Injection) in JMSMessageConsumer	21 Aug 202208:15	–	cvelist
EUVD	EUVD-2022-6565	3 Oct 202520:07	–	euvd
Github Security Blog	Remote code execution in Apache Flume	22 Aug 202200:00	–	github
NVD	CVE-2022-34916	21 Aug 202209:15	–	nvd
OSV	CVE-2022-34916	21 Aug 202209:15	–	osv
OSV	GHSA-H9MH-MGPV-GQMV Remote code execution in Apache Flume	22 Aug 202200:00	–	osv
Prion	Remote code execution	21 Aug 202209:15	–	prion

NVD

Vulners

Node

apache flumeRange1.4.0–1.10.1

[
  {
    "product": "Apache Flume",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "changes": [
          {
            "at": "1.4.0",
            "status": "affected"
          }
        ],
        "lessThan": "1.11.0",
        "status": "affected",
        "version": "flume-jms-source",
        "versionType": "custom"
      }
    ]
  }
]