high7.5
CVE-2021-41561
Improper Input Validation in Parquet-MR
Impact
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.parquet:parquet | >= 1.12.0, < 1.12.2 | 1.12.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Parquet Java | before 1.11.2 from 1.12.0 before 1.12.2 |