logo

Database

Lack of data validation In org.apache.spark:spark-core

Description

Improper Input Validation

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2018-118042. NVD-2018-118043. OSV-2018-118044. GCVE-2018-118045. spark.apache.org

References

1. http://www.securityfocus.com/bid/1057562. https://lists.apache.org/thread.html/2b11aa4201e36f2ec8f728e722fe33758410f07784379cbefd0bda9d%40%3Cdev.spark.apache.org%3E3. https://lists.apache.org/thread.html/2b11aa4201e36f2ec8f728e722fe33758410f07784379cbefd0bda9d@%3Cdev.spark.apache.org%3E4. https://spark.apache.org/security.html#CVE-2018-118045. https://web.archive.org/web/20200227103903/http://www.securityfocus.com/bid/105756

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.