Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | CVE-2023-26031 | 12 Jan 202415:26 | – | circl |
 | Apache Hadoop Code Issue Vulnerability | 16 Nov 202300:00 | – | cnnvd |
 | CVE-2023-26031 Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems | 16 Nov 202308:15 | – | cvelist |
 | Apache Hadoop allows local user to gain root privileges | 16 Nov 202309:30 | – | github |
 | Vulnerabilities fixed in Oracle Financial Services Applications | 17 Jul 202413:53 | – | ncsc |
| Vulnerabilities fixed in Oracle Analytics | 17 Jul 202413:54 | – | ncsc |
| Vulnerabilities fixed in Oracle Database products | 17 Oct 202413:15 | – | ncsc |
| Vulnerabilities fixed in Oracle Financial Services | 22 Jan 202513:33 | – | ncsc |
 | CVE-2023-26031 | 16 Nov 202309:15 | – | nvd |
 | Oracle Critical Patch Update Advisory - January 2025 | 21 Jan 202500:00 | – | oracle |
10
[
{
"defaultStatus": "unaffected",
"product": "Apache Hadoop",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "3.3.5",
"status": "affected",
"version": "3.3.1",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| RUNPATH | binary | /opt/hadoop/bin/container-executor | Vulnerability due to configurable library load path allowing a low-privileged user to influence loaded native libraries (e.g., libcrypto) and escalate privileges when container-executor runs as root for YARN secure containers. | CWE-426 |
| RPATH | binary | /opt/hadoop/bin/container-executor | Vulnerability due to configurable library load path allowing a low-privileged user to influence loaded native libraries (e.g., libcrypto) and escalate privileges when container-executor runs as root for YARN secure containers. | CWE-426 |
| Library runpath | binary | /opt/hadoop/bin/container-executor | Vulnerability due to configurable library load path allowing a low-privileged user to influence loaded native libraries (e.g., libcrypto) and escalate privileges when container-executor runs as root for YARN secure containers. | CWE-426 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Feb 2025 17:16Current
7.7High risk
Vulners AI Score7.7
CVSS 3.17.5
EPSS0.09267
SSVC