Azure Linux 3.0 Security Update: libarrow (CVE-2024-52338)

The version of libarrow installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52338 advisory. - Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0...

CVE-2024-52338

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example, user-supplied input files. This...

CVE-2024-52338 affecting package ceph for versions less than 18.2.2-2

CVE-2024-52338 affecting package ceph for versions less than 18.2.2-2. A patched version of the package is available...

CVE-2024-52338 affecting package libarrow for versions less than 15.0.0-7

CVE-2024-52338 affecting package libarrow for versions less than 15.0.0-7. A patched version of the package is available...

CVE-2024-52338

creationtimestamp| type| source ---|---|--- 2024-11-28 16:37:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113561558585495401 2024-11-30 10:50:12+00:00| seen| https://t.me/CyberBulletin/26667 2024-11-30 10:50:13+00:00| seen| https://t.me/CyberBulletin/1656 2024-11-30 16:44:29+00:00|...

CVE-2024-52338 Apache Arrow R package: Arbitrary code execution when loading a malicious data file

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example, user-supplied input files. This...

CVE-2024-52338 Apache Arrow R package: Arbitrary code execution when loading a malicious data file

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example, user-supplied input files. This...