PT-2019-12791 · Apache · Apache Arrow

Published 2019-11-08 · Updated 2022-05-24 · CVE-2019-12410

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Apache Arrow versions 0.12.0 through 0.14.1

Description The issue arises when reading RLE null data from parquet, resulting in uninitialized Array data being left in memory. This affects the C++, Python, Ruby, and R implementations of Apache Arrow. The uninitialized memory could potentially be shared if transmitted over the wire or persisted in streaming IPC and file formats.

Recommendations For Apache Arrow versions 0.12.0 through 0.14.1, update to a version that initializes memory properly when reading RLE null data from parquet to prevent potential data sharing issues.

Exploit

Fix

Weakness Enumeration

CWE-909

Related Identifiers

CVE-2019-12410

GHSA-CJW4-2W9R-R8MV

PYSEC-2019-196

Affected Products

Apache Arrow

References · 13

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/red-arrow/CVE-2019-12410.yml · Exploit
• https://osv.dev/vulnerability/GHSA-cjw4-2w9r-r8mv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12410 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12410 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-196 · Vendor Advisory
• https://github.com/apache/arrow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2019-196.yaml · Note
• https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E · Note
• https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E · Note
• https://github.com/advisories/GHSA-cjw4-2w9r-r8mv · Note
• http://openwall.com/lists/oss-security/2019/11/08/1 · Note
• https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269%40%3Cdev.arrow.apache.org%3E · Note
• https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073%40%3Cannounce.apache.org%3E · Note