VDB
BDU%3A2025-05249
BDU%3A2025-05249
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость метода Arrays.equals() СУБД Apache Hive, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Hive | |
| Apache Software Foundation | Apache Hive | 2.2.0 |
Timeline
- Jan 28, 2025 CVE Published
- Jan 28, 2025 PoC Published
- Jan 28, 2025 PoC Published
- Jan 28, 2025 PoC Published
- Jan 28, 2025 PoC Published
- Jan 28, 2025 PoC Published
- Jan 28, 2025 PoC Published
- Jan 31, 2025 PoC Published
- Jan 31, 2025 PoC Published
- Feb 3, 2025 PoC Published
- May 6, 2025 CVE Updated
- May 30, 2025 PoC Published
References
- https://blog.gypsyengineer.com/en/security/preventing-timing-attacks-with-codeql.html url
- https://github.com/apache/hive url
- https://lists.apache.org/thread/0nloywj49nbtlc6l3c6363qvq7o1ztb7 url
- https://github.com/apache/hive/commit/b418e3c9f479ba8e7d31e6470306111002ffa809 url
- https://issues.apache.org/jira/browse/HIVE-28030 url
- https://cqr.company/web-vulnerabilities/timing-attacks/ url
- http://www.openwall.com/lists/oss-security/2025/01/28/3 url