CVE-2012-3376

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool…

published July 12, 2012

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02633 · 85.3th percentile
Published
2012-07-12T19:00Z
EPSS history
Timeline
  • 12 JUL 19:00Z
    DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool…
    cvelistv5