GitHub Advisoryadvisory · Maven

GHSA-gc67-crq6-hgh5 Improper Input Validation in Parquet-MR

HIGH Published 2022-01-06 Modified 2022-01-06 Official page ↗
Aliases
CVE-2021-41561
Ecosystem
Maven
Packages
org.apache.parquet:parquet
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2022-01-06

Affected packages

• Maven org.apache.parquet:parquet: >= 1.12.0, < 1.12.2 → fixed in 1.12.2 • Maven org.apache.parquet:parquet: < 1.11.2 → fixed in 1.11.2

Description

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

Related

Alias · CVE (1)

  • CVE-2021-41561 Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References