ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +2648 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (>=2.0.5-alpha, <=2.6.5)

org.apache.hadoop:hadoop-client MAVEN version =2.0.5-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.2.5, =1.6.13 and more Source cves: CVE-2017-3162...

com.approvaltests:approvaltests-hadoop (>=2.0.0, <=7.0.0), org.apache.airavata:airavata-gfac-hadoop (>=0.12, <=0.13) +5 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.0.3)

org.apache.hadoop:hadoop-client MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - com.approvaltests:approvaltests-hadoop =2.0.0, =0.12, =0.13, =0.3.0-incubating, =0.4.0-incubating...

ai.h2o:sparkling-water-core_2.10 (>=0.2.0, <=0.2.3), ai.h2o:sparkling-water-examples_2.10 (0.2.3) +92 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.0.4)

org.apache.hadoop:hadoop-client MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - ai.h2o:sparkling-water-core2.10 =0.2.0, =1.1.0-beta2, =1.1.0-beta2, =1.0.0-rc3, =1.1.0-alpha1,...

com.esri.hadoop:spatial-sdk-hive (>=1.0.1, <=1.1), com.esri.hadoop:spatial-sdk-json (>=1.0.1, <=1.1) +11 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.1.1)

org.apache.hadoop:hadoop-client MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - com.esri.hadoop:spatial-sdk-hive =1.0.1, =1.0.1, =1.1 - org.apache.oozie:oozie-core 4.1.0 -...

org.securegraph:securegraph-accumulo (>=0.5.0, <=0.8.1), org.securegraph:securegraph-accumulo-blueprints (>=0.5.0, <=0.8.1) +4 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (0.23.10)

org.apache.hadoop:hadoop-client MAVEN version 0.23.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - org.securegraph:securegraph-accumulo =0.5.0, =0.5.0, =0.5.0, =0.6.0, =0.5.0, =0.5.0, =0.8.1...

io.brooklyn.example:brooklyn-example-hello-world-hadoop-webapp (>=0.4.0, <=0.7.0-m1) potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.0.2)

org.apache.hadoop:hadoop-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - io.brooklyn.example:brooklyn-example-hello-world-hadoop-webapp =0.4.0, =0.7.0-m1 Source cves:...

com.fing.fourmc:hadoop-4mc (3.0.0), com.twitter.elephantbird:elephant-bird-hadoop-compat (>=4.0, <=4.17) +12 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.1.2)

org.apache.hadoop:hadoop-client MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - com.fing.fourmc:hadoop-4mc 3.0.0 - com.twitter.elephantbird:elephant-bird-hadoop-compat =4.0,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +2648 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (>=2.0.5-alpha, <=2.6.5)

org.apache.hadoop:hadoop-client MAVEN version =2.0.5-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.2.5, =1.6.13 and more Source cves: CVE-2017-3162...

Security Bulletin: Security vulnerabilities have been identified in Open Source Apache Hadoop that are dependencies for IBM InfoSphere BigInsights (IBM Open Platform with Apache Hadoop) CVE-2017-3161, CVE-2017-3162

Summary Security vulnerabilities have been identified in Open Source Apache Hadoop that are dependencies for IBM InfoSphere BigInsights IBM Open Platform with Apache Hadoop CVE-2017-3161, CVE-2017-3162 Vulnerability Details CVE-ID: CVE-2017-3161 Description: Apache Hadoop is vulnerable to...

Photon OS 1.0: Cassandra / Libxml2 / Linux / Ruby PHSA-2017-0029 (deprecated)

An update of ruby,cassandra,linux,libxml2 packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C...

CVE-2017-3162

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...

CVE-2017-3162

Apache Hadoop CVE-2017-3162: A vulnerability in the HDFS namespace browsing flow where the DataNode servlet accepts a NameNode URL as a query parameter without validation, allowing an attacker to bypass security restrictions. Affected software includes Hadoop versions prior to 2.7.0; the issue st...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +2713 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (>=0.23.9, <=2.6.5)

org.apache.hadoop:hadoop-client MAVEN version =0.23.9, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.2.0, =1.6.13 and more Source cves: CVE-2017-3162 Source...

Apache Hadoop DataNode Missed Validation Vulnerability

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated. Apache Hadoop versions 2.6.x and earlier are affected. CVE-2017-3162: Apache Hadoop DataNode web UI vulnerability Severity: Important Vendor: The...