CVE-2018-11768
- State
- Published
- Severity
- Not scored
- Published
- Oct 4, 2019
- Updated
- Aug 5, 2024
- Reserved
- Jun 5, 2018
Description
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache Hadoopn/a |
|
References
- https://lists.apache.org/thread.html/2067a797b330530a6932f4b08f703b3173253d0a2b7c8c524e54adaf%40%3Cgeneral.hadoop.apache.org%3E
- [hadoop-general] 20191004 Re:CVE-2018-11768: HDFS FSImage Corruptionmailing-list
- [hadoop-hdfs-dev] 20191004 Re:CVE-2018-11768: HDFS FSImage Corruptionmailing-list
- [hadoop-hdfs-dev] 20191004 Re: CVE-2018-11768: HDFS FSImage Corruptionmailing-list
- [hadoop-hdfs-dev] 20191006 Re: CVE-2018-11768: HDFS FSImage Corruptionmailing-list
- [lucene-dev] 20191029 Re: CVE-2018-11768 in regards to Solrmailing-list
- [lucene-dev] 20191029 CVE-2018-11768 in regards to Solrmailing-list
- [lucene-dev] 20191031 RE: CVE-2018-11768 in regards to Solrmailing-list
- [flink-dev] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 versionmailing-list
- [flink-user] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 versionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.