CVE-2024-23454
LowAdvisory
Published 25 Sept 2024In the index since 6 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.3
- base score, highest
- EPSS
- 0.004
- 32nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 62
- of 17,781 indexed, latest versions
- Container images
- 55
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Apache Hadoop: Temporary File Local Information Disclosure
Carried by container images the latest versions of 62 of 17,781 indexed charts deploy, on 55 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| hadoop-commonmaven | 2.7.0, 2.7.3, 2.7.4, 2.7.5+22 more | 3.4.0 | 55 |
- OSV records
- GHSA-f5fw-25gw-5m92
Charts affected
62 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| delta-sharing-serverinseefrlab | 1.2.1 | 1 of 1See more | 6,174 |
| pinotinseefrlab | 0.2.0 | 1 of 2See more | 10,777 |
| hive-metastoreolehrgfVerified publisher | 0.1.0 | 1 of 1See more | 8,540 |
| apache-knox-helmpfisterer-knox | 0.1.11 | 1 of 1See more | 6,237 |
| hive-metastorepresto-loadbalancer | 0.2.3 | 1 of 1See more | 9,606 |
| punchline-javapunchplatform | 8.1.1 | 1 of 1See more | 1,995 |
| rada-platformrada-platform | 0.1.0 | 1 of 7See more | 21,211 |
| fdi-dotstatsuite-sfs-solrstatcan | 1.0.2 | 1 of 4See more | 6,065 |
| solrstatcan | 1.5.10 | 1 of 3See more | 8,806 |
| trinostatcan | 1.23.4 | 1 of 2See more | 13,767 |
| hadoop-deploymenttejaswita-hadoop-helmchart | 1.0.0 | 1 of 1See more | 4,240 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
Container images carrying it
55 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| marcelmay/ | 6292c0a41ffa | hadoop-common | 3.4.0 | 8 |
| gradiant/ | 3b28784ba41f | hadoop-common | 3.4.0 | 7 |
| bde2020/ | 620267768985 | hadoop-common | 3.4.0 | 4 |
| gradiant/ | a1ee6de94c04 | hadoop-common | 3.4.0 | 4 |
| gchq/ | 5ec58edbb2db | hadoop-common | 3.4.0 | 3 |
| library/ | 8c5f7881cebb | hadoop-common | 3.4.0 | 3 |
| apache/ | 0116fb802786 | hadoop-common | 3.4.0 | 2 |
| danisla/ | 255ba2dd739b | hadoop-common | 3.4.0 | 2 |
| gradiant/ | aae4f8a21f8b | hadoop-common | 3.4.0 | 2 |
| gradiant/ | 97657d56e927 | hadoop-common | 3.4.0 | 2 |
| 5200710/ | 092d3088a5fb | hadoop-common | 3.4.0 | 1 |
| 5200710/ | e34ab066d2ed | hadoop-common | 3.4.0 | 1 |
| aerospike/ | 781ba5213efd | hadoop-common | 3.4.0 | 1 |
| aerospike/ | f35739b97a46 | hadoop-common | 3.4.0 | 1 |
| apache/ | 1f96558fd292 | hadoop-common | 3.4.0 | 1 |
| apache/ | 0cef139b6bf1 | hadoop-common | 3.4.0 | 1 |
| apache/ | 80136ae753ee | hadoop-common | 3.4.0 | 1 |
| apache/ | af361b20bec0 | hadoop-common | 3.4.0 | 1 |
| apacheignite/ | d7deab68b8fa | hadoop-common | 3.4.0 | 1 |
| apachepinot/ | 0018bb04ced7 | hadoop-common | 3.4.0 | 1 |
| apache/ | 76c176e8a0e4 | hadoop-common | 3.4.0 | 1 |
| assistiot/ | c8b6c7eaa0cd | hadoop-common | 3.4.0 | 1 |
| datappeal/ | e38c085a3567 | hadoop-common | 3.4.0 | 1 |
| dbanda/ | 0ca125e68e53 | hadoop-common | 3.4.0 | 1 |
| dbanda/ | d0e6367876ae | hadoop-common | 3.4.0 | 1 |
| deltaio/ | 8b75118187c5 | hadoop-common | 3.4.0 | 1 |
| dremio/ | 80ed2e3b7c43 | hadoop-common | 3.4.0 | 1 |
| egdsandaru/ | 681baa1926f4 | hadoop-common | 3.4.0 | 1 |
| farberg/ | 4b4a22487394 | hadoop-common | 3.4.0 | 1 |
| fimperato/ | 604012b77841 | hadoop-common | 3.4.0 | 1 |
| gchq/ | c460bb587d6d | hadoop-common | 3.4.0 | 1 |
| gradiant/ | e3bf364fe713 | hadoop-common | 3.4.0 | 1 |
| gridgain/ | d32d182a0e6a | hadoop-common | 3.4.0 | 1 |
| hazelcast/ | 8fe26efde8e1 | hadoop-common | 3.4.0 | 1 |
| hazelcast/ | a825ecbe9fda | hadoop-common | 3.4.0 | 1 |
| ibmcom/ | e31ff09e8aad | hadoop-common | 3.4.0 | 1 |
| library/ | c7984a05e15b | hadoop-common | 3.4.0 | 1 |
| library/ | d124efd81fbb | hadoop-common | 3.4.0 | 1 |
| library/ | bd5d420506d6 | hadoop-common | 3.4.0 | 1 |
| lightbend/ | 0bedf37f428a | hadoop-common | 3.4.0 | 1 |
| magento/ | 59fb6f0f1461 | hadoop-common | 3.4.0 | 1 |
| marcelmay/ | abeccb740ef7 | hadoop-common | 3.4.0 | 1 |
| opensearchproject/ | 57c25fa01d3c | hadoop-common | 3.4.0 | 1 |
| slamdev/ | b4b029c9b15f | hadoop-common | 3.4.0 | 1 |
| snappydatainc/ | fd4b2070466f | hadoop-common | 3.4.0 | 1 |
| sslhep/ | 9e80af083079 | hadoop-common | 3.4.0 | 1 |
| trinodb/ | 38c6f24ab1a4 | hadoop-common | 3.4.0 | 1 |
| trinodb/ | ee80ab5eeab2 | hadoop-common | 3.4.0 | 1 |
| ghcr.io/ | c144bdd688d7 | hadoop-common | 3.4.0 | 1 |
| ghcr.io/ | ac62269785ac | hadoop-common | 3.4.0 | 1 |