CVE-2021-37404

CVE-2021-37404: Heap buffer overflow in libhdfs native library

Vendor Apache Software Foundation
Product Apache Hadoop
Weakness CWE-787
Published June 13, 2022
Last update August 4, 2024

CVSS base score

What the vulnerability does

01Description

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

Key dates

02Disclosure timeline

June 13, 2022 CVE published
August 4, 2024 Record updated