CVE-2021-41561

Improper Input Validation in maven/rg.apache.parquet/parquet

Identifiers

GHSA-gc67-crq6-hgh5, CVE-2021-41561

Package Slug

maven/rg.apache.parquet/parquet

Vulnerability

Improper Input Validation

Description

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

Affected Versions

All versions starting from 1.12.0 before 1.12.2, all versions before 1.11.2

Solution

Upgrade to version 1.11.2 or above.

Last Modified

2022-01-11

source