Lucene search

Race condition in org.apache.hbase:hbase-thrift

🗓️ 18 Oct 2018 18:02:05Reported by GitHub Advisory DatabaseType

Race condition in Apache HBase Thrift API server over HTTP

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
redhatcve	CVE-2018-8025	2 Jul 201822:33	–	redhatcve
prion	Race condition	27 Jun 201815:29	–	prion
osv	CVE-2018-8025	27 Jun 201815:29	–	osv
osv	Race condition in org.apache.hbase:hbase-thrift	18 Oct 201818:05	–	osv
veracode	Authorization Bypass	25 Jun 201803:00	–	veracode
nvd	CVE-2018-8025	27 Jun 201815:29	–	nvd
cvelist	CVE-2018-8025	27 Jun 201815:00	–	cvelist
cve	CVE-2018-8025	27 Jun 201815:29	–	cve

Vulners

Node

org.apache.hbase hbase-thriftRange≤1.2.6.0

org.apache.hbase hbase-thriftRange1.3.0–1.3.2.0

org.apache.hbase hbase-thriftRange1.4.0–1.4.5

org.apache.hbase hbase-thrift

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8025
github	www.github.com/advisories/GHSA-r86j-2gc6-2cq9
lists	www.lists.apache.org/thread.html/a919e38f587c714c386a01d40fc8f45bd4219a65aaf2dc0bb4eccc96@%3Cdev.hbase.apache.org%3E
securityfocus	www.securityfocus.com/bid/104554
github	www.github.com/apache/hbase/commit/0c42acbdf86d08af3003105a26a2201f75f2e2c
github	www.github.com/apache/hbase/commit/30e98b4455f971c9cb3c02ac7b2daeebe4ee6f2
github	www.github.com/apache/hbase/commit/625d4d002620139f49c8201f95b789b6a715cd4
github	www.github.com/apache/hbase/commit/7fe07075b35a816725ba18f6dd43d3fa84e08f9
github	www.github.com/apache/hbase/commit/bf25c1cb7221178388baaa58f0b16a408e151a6
issues	www.issues.apache.org/jira/browse/HBASE-20664

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Oct 2018 18:05Current

8.1High risk

Vulners AI Score8.1

CVSS26.8

CVSS38.1

EPSS0.00695

CWE-362