CVE-2018-11766

In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete

published November 27, 2018

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03244 · 88.2th percentile
Published
2018-11-27T14:00Z
EPSS history
Timeline
  • 27 NOV 14:00Z
    In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete
    cvelistv5