Description
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
Remediation
References
http://www.openwall.com/lists/oss-security/2021/12/20/1
https://lists.apache.org/thread/1bjlscbqtfzl160hrm9lnpjpppp5z3zr
Related Vulnerabilities
CVE-2019-0195 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2023-46651 Vulnerability in maven package io.jenkins.plugins:warnings-ng
CVE-2021-38555 Vulnerability in maven package org.apache.any23:apache-any23-core
CVE-2020-36518 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind