VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 5, 2017· Updated Jun 17, 2026

CVE-2017-7669

CVE-2017-7669

Description

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.hadoop:hadoop-commonMaven
< 2.8.12.8.1
org.apache.hadoop:hadoop-commonMaven
>= 3.0.0-alpha1, < 3.0.0-alpha33.0.0-alpha3

Affected products

5
  • Apache/Hadoop3 versions
    cpe:2.3:a:apache:hadoop:2.8.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:hadoop:2.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.apache.hadoop/hadoop-common
    Range: < 2.8.1
  • Apache Software Foundation/Apache Hadoopv5
    Range: 2.8.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.