/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-cwr2-q95m-c7q6

Published

Last updated

https://images.chainguard.dev/security/CGA-cwr2-q95m-c7q6
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2017-7669
  • GHSA-h24p-qwf4-84q8

Severity

Unknown

Summary

Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation

Description

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root. This issue is fixed in versions 2.8.1 and 3.0.0-alpha3.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs