StackRadar

CVE-2021-33036

High

Advisory

Published 16 Jun 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.038
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

User account escalation in Apache Hadoop

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
hadoop-yarn-server-commonmaven2.7.3, 2.7.4, 2.7.7, 2.8.5+7 more2.10.2, 3.2.320
OSV records
GHSA-58jx-f5rf-qgqf

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
hadoop-yarn-server-common@3.1.3
3.2.3
dbanda/spark:2.4.6d0e6367876ae
hadoop-yarn-server-common@3.1.3
3.2.3

Open the chart page →

13,738
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
hadoop-yarn-server-common@3.2.2
3.2.3

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-yarn-server-common@2.7.4
2.10.2

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
hadoop-yarn-server-common@3.1.0
3.2.3

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
hadoop-yarn-server-common@2.10.1
2.10.2

Open the chart page →

8,198
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
hadoop-yarn-server-common@2.9.0
2.10.2

Open the chart page →

5,772
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-yarn-server-common@2.7.4
2.10.2

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
hadoop-yarn-server-common@2.8.5
2.10.2

Open the chart page →

6,165
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
hadoop-yarn-server-common@2.9.0
2.10.2

Open the chart page →

5,772
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
hadoop-yarn-server-common@2.10.1
2.10.2

Open the chart page →

13,486
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
hadoop-yarn-server-common@2.7.4
2.10.2

Open the chart page →

8,866
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
hadoop-yarn-server-common@2.7.3
2.10.2

Open the chart page →

14,066
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-yarn-server-common@2.7.3
2.10.2

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
hadoop-yarn-server-common@2.7.3
2.10.2

Open the chart page →

5,639
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-yarn-server-common@2.7.4
2.10.2

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-yarn-server-common@2.7.4
2.10.2

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-yarn-server-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-yarn-server-common@2.7.3
2.10.2

Open the chart page →

6,147
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
hadoop-yarn-server-common@2.10.0
2.10.2

Open the chart page →

10,540
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
hadoop-yarn-server-common@2.8.5
2.10.2

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
hadoop-yarn-server-common@2.10.1
2.10.2

Open the chart page →

6,174
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-33036.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
hadoop-yarn-server-common@3.2.0
3.2.3

Open the chart page →

9,606

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
hadoop-yarn-server-common@2.7.7
2.10.2
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-yarn-server-common@2.7.4
2.10.2
4
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-yarn-server-common@2.7.4
2.10.2
4
danisla/hadoop:2.9.0255ba2dd739b
hadoop-yarn-server-common@2.9.0
2.10.2
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-yarn-server-common@2.7.4
2.10.2
2
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-yarn-server-common@2.7.3
2.10.2
2
datappeal/hive-metastore:lateste38c085a3567
hadoop-yarn-server-common@3.2.0
3.2.3
1
dbanda/livy:0.80ca125e68e53
hadoop-yarn-server-common@3.1.3
3.2.3
1
dbanda/spark:2.4.6d0e6367876ae
hadoop-yarn-server-common@3.1.3
3.2.3
1
deltaio/delta-sharing-server:0.2.08b75118187c5
hadoop-yarn-server-common@2.10.1
2.10.2
1
dremio/dremio-oss:24.1.080ed2e3b7c43
hadoop-yarn-server-common@2.8.5
2.10.2
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
hadoop-yarn-server-common@2.7.4
2.10.2
1
gradiant/hdfs:3.2.2e3bf364fe713
hadoop-yarn-server-common@3.2.2
3.2.3
1
library/storm:2.4.0bd5d420506d6
hadoop-yarn-server-common@2.8.5
2.10.2
1
lightbend/spark-history-server:2.4.00bedf37f428a
hadoop-yarn-server-common@2.7.3
2.10.2
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
hadoop-yarn-server-common@2.10.1
2.10.2
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
hadoop-yarn-server-common@2.7.3
2.10.2
1
sslhep/hive-metastore:3.1.39e80af083079
hadoop-yarn-server-common@3.1.0
3.2.3
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
hadoop-yarn-server-common@2.10.0
2.10.2
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
hadoop-yarn-server-common@2.10.1
2.10.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.