Apache Software Foundation Hadoop 2.0.0 alpha

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*

part: a version: 2.0.0 update: alpha

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductHadoop (69f26508-0b29-5671-ae34-5898b6ed48d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/hadoop purl2cpe 2026-06-01 10:14:26.774659
pkg:dokcer/apache/hadoop purl2cpe 2026-06-01 10:14:26.774661
pkg:github/apache/hadoop purl2cpe 2026-06-01 10:14:26.774662
pkg:maven/org.apache.hadoop/hadoop-core purl2cpe 2026-06-01 10:14:26.774664
pkg:rpm/fedora/hadoop purl2cpe 2026-06-01 10:14:26.774665
pkg:rpm/opensuse/hadoop purl2cpe 2026-06-01 10:14:26.774666

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8009 vulnerable 2026-06-08 05:12:04.938743 Details available
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.
Published: 2018-11-13T21:00:00.000Z
Updated: 2024-08-05T06:46:11.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11768 vulnerable 2026-06-08 05:10:38.938811 Details available
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.
Published: 2019-10-04T13:56:56.000Z
Updated: 2024-08-05T08:17:09.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15713 vulnerable 2026-06-08 05:08:59.485340 Details available
Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.
Published: 2018-01-19T17:00:00.000Z
Updated: 2024-09-17T04:08:48.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3627 vulnerable 2026-06-08 05:05:41.893499 Details available
The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.
Published: 2014-12-05T16:00:00.000Z
Updated: 2024-08-06T10:50:17.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0229 vulnerable 2026-06-08 05:05:12.380383 Details available
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command.
Published: 2017-03-23T20:00:00.000Z
Updated: 2024-08-06T09:05:39.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2192 vulnerable 2026-06-08 05:03:58.930018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4449 vulnerable 2026-06-08 05:02:17.663420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3376 vulnerable 2026-06-08 05:02:09.455752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.