CVE-2022-26612

一、漏洞信息
 漏洞编号：[CVE-2022-26612](https://nvd.nist.gov/vuln/detail/CVE-2022-26612)
 漏洞归属组件：[hadoop](https://gitee.com/src-openeuler/hadoop)
 漏洞归属的版本：3.2.1
 CVSS V3.0分值：
  BaseScore：9.8 Critical
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 漏洞简述：
  In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn t resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3
 漏洞公开时间：2022-04-08 03:15
 漏洞创建时间：2022-05-19 01:32:35
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2022-26612
<details>
<summary>更多参考(点击展开)</summary>

无
</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  其它
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
              In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn t resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was      
 openEuler评分：
  9.8
 Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-22.03-LTS(3.3.6):受影响
2.openEuler-20.03-LTS-SP1(3.3.4):受影响
3.openEuler-20.03-LTS-SP3(3.3.4):受影响
4.openEuler-24.03-LTS(3.3.6):
5.openEuler-24.03-LTS-Next(3.3.6):
6.openEuler-22.03-LTS-SP4(3.3.6):
7.master(3.3.6):
8.openEuler-24.03-LTS-SP2(3.3.6):

修复是否涉及abi变化(是/否)：
  1.openEuler-22.03-LTS(3.3.6):否
2.openEuler-20.03-LTS-SP1(3.3.4):否
3.openEuler-20.03-LTS-SP3(3.3.4):否
4.openEuler-24.03-LTS(3.3.6):
5.openEuler-24.03-LTS-Next(3.3.6):
6.openEuler-22.03-LTS-SP4(3.3.6):
7.master(3.3.6):
8.openEuler-24.03-LTS-SP2(3.3.6):

原因说明：
  1.master(3.3.6):
2.openEuler-20.03-LTS-SP4(3.3.6):
3.openEuler-22.03-LTS-SP3(3.3.6):
4.openEuler-22.03-LTS-SP4(3.3.6):
5.openEuler-24.03-LTS(3.3.6):
6.openEuler-24.03-LTS-Next(3.3.6):
7.openEuler-24.03-LTS-SP1(3.3.6):
8.openEuler-24.03-LTS-SP2(3.3.6):

src-openEuler/hadoop

Content Risk Flag

Comments (11)

src-openEuler/hadoop .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2022-26612

Comments (11)

Search

src-openEuler/hadoop