Description

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

Remediation

References

http://www.openwall.com/lists/oss-security/2021/12/20/1

https://lists.apache.org/thread/1bjlscbqtfzl160hrm9lnpjpppp5z3zr

Related Vulnerabilities

CVE-2020-8149 Vulnerability in npm package logkitty

CVE-2022-46907 Vulnerability in maven package org.apache.jspwiki:jspwiki-main

CVE-2022-39299 Vulnerability in npm package @node-saml/node-saml

CVE-2023-39151 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2022-25893 Vulnerability in npm package vm2

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Mailing List Third Party Advisory Vendor Advisory