CVE-2017-7669
Fixed upstream EPSS 2%
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
Products: Apache Software Foundation Apache Hadoop
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.hadoop:hadoop-common | 2.8.1 |
| Maven | org.apache.hadoop:hadoop-common | 3.0.0-alpha3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | hadoop-fips-3.3.6 | no fix |