PT-2026-4646 · Apache · Apache Hadoop

CVE-2025-27821 · Publicado 2026-01-25 · Atualizado 2026-07-21

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Nome do Software Vulnerável e Versões Afetadas Versões do Apache Hadoop (versões afetadas não especificadas)

Descrição Existe uma falha de escrita fora dos limites no analisador de URI do cliente HDFS do Hadoop. Este problema afeta o cliente nativo.

Recomendações Até o momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Exploit

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CLEANSTART-2026-JU62349

CLEANSTART-2026-RS65756

CLEANSTART-2026-SH44648

CLEANSTART-2026-SQ91016

CLEANSTART-2026-SV95049

CLEANSTART-2026-WK99982

CVE-2025-27821

GHSA-92CC-952P-V8RH

Produtos afetados

Apache Hadoop

Referências · 247

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27821.json · Exploit
• https://github.com/apache/hadoop/pull/7481 · Nota
• https://github.com/apache/hadoop/commit/2b32e46f666c7645f5d1e026be3982b99319ccb8 · Nota
• https://github.com/apache/hadoop · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RS65756.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SH44648.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SQ91016.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SV95049.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JU62349.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK99982.json · Nota
• https://osv.dev/vulnerability/CVE-2023-20861 · Nota
• https://osv.dev/vulnerability/GHSA-92cc-952p-v8rh · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-50193 · Nota
• https://osv.dev/vulnerability/ghsa-72hv-8253-57qq · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-46340 · Nota de Segurança