7.5
CVE-2021-41561
- EPSS 0.41%
- Veröffentlicht 20.12.2021 12:15:07
- Zuletzt bearbeitet 28.07.2025 14:54:17
- Quelle security@apache.org
- Teams Watchlist Login
- Unerledigt Login
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Parquet Java Version < 1.11.2
Apache ≫ Parquet Java Version >= 1.12.0 < 1.12.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.604 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.