Apache Hadoop HDFS native client
Moderate fix1 remedy
cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 3.2.0, < 3.4.2
Apache Hadoop HDFS Native Client Out-of-Bounds Write Vulnerability
Vulnerability
Patched
A vulnerability allowing out-of-bounds write has been identified in the Apache Hadoop HDFS native client, specifically in versions 3.2.0 prior to 3.4.2. This vulnerability arises in the URI parser of the native HDFS client.
Impact
Exploitation of this vulnerability leads to an out-of-bounds write, which can commonly result in memory corruption issues.
Remediation
Users are advised to upgrade to Apache Hadoop version 3.4.2, which addresses this vulnerability.
Added: Jan 26, 2026, 10:25 AM
Updated: Jan 26, 2026, 3:36 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
10.0exploitability
7.0remediation
7.7relevance
2.4threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.