VDB
BDU%3A2023-08044
BDU%3A2023-08044
PUBLISHED
CVSS 10 CRITICAL
Уязвимость библиотеки PyArrow, связанная с считыванием данных из недостоверных источников, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Pyarrow |
Timeline
- Nov 22, 2023 CVE Published
- Dec 12, 2024 CVE Updated
References
- https://github.com/apache/arrow/commit/f14170976372436ec1d03a724d8d3f3925484ecf url
- https://lists.apache.org/thread/yhy7tdfjf9hrl9vfrtzo8p2cyjq87v7n url
- https://pypi.org/project/pyarrow-hotfix/ url
- https://huntr.com/bounties/0ca31375-bbd4-4712-a166-848d981d89f9/?__hstc=79449099.f7d3f20db1bfaa4204b84306ed5e45da.1733330123520.1733330123520.1733330123520.1&__hssc=79449099.2.1733330123520&__hsfp=683428783&_gl=1*xrkgpt*_ga*MTI1NTA5MDQ4MC4xNzMzMzMwMTEz*_ga_MT9HL3EKXV*MTczMzMzMDExMi4xLjEuMTczMzMzMDQwOC40MS4wLjE3MjI4MDQ2NTY url