Known vulnerabilities in hadoop-yarn-security

Vendor: openEuler
Software: hadoop-yarn-security
Software CPE: cpe:2.3:o:openeuler:hadoop-yarn-security:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting hadoop-yarn-security hadoop-yarn-security is affected by 7 known vulnerabilities: 2 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97712 - Incorrect Default Permissions
CVE-2024-23454		 CWE-276 Low
No
No
 3.3.4-4, 3.3.6-3, 3.3.6-4 26.09.2024 SB2024092604
SB20241108105
SB20241108106
and 14 more
#VU69531 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25168		 CWE-78 High
No
No
 3.3.4-1 23.11.2022 SB2022112314
SB2022112334
SB2022121525
and 10 more
#VU68739 - Heap-based Buffer Overflow
CVE-2021-37404		 CWE-122 High
No
No
 3.3.4-1 26.10.2022 SB2022062017
SB2022102620
SB2023092025
and 3 more
#VU64513 - Permissions, Privileges, and Access Controls
CVE-2021-33036		 CWE-264 Medium
No
No
 3.3.4-1 20.06.2022 SB2022062017
SB2022102620
SB2022102155
and 3 more
#VU62082 - Security Features
CVE-2022-26612		 CWE-254 Medium
No
No
 3.3.4-1 12.04.2022 SB2022041216
SB2022103132
SB2022112334
and 8 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492		 CWE-264 Medium
No
No
 3.2.1-7 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 3.2.1-10 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more