Executive brief
Remote Code Execution in spark-core
Affected products
- Maven org.apache.spark:spark-core_2.10
- Maven org.apache.spark:spark-core_2.11
Junglewise Threat Intelligence
CVE-2018-17190: Remote Code Execution in spark-core
CVE-2018-17190 · Severity: low · CVSS 3 · Published 2018-11-21
Technologies: org.apache.spark:spark-core_2.10 (Maven), org.apache.spark:spark-core_2.11 (Maven). Vendors: Maven.
Related threats
- Improper Input Validation in Apache Spark
- PYSEC-2019-114 - Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true.
- Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
- org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
- PYSEC-2017-147 - In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications