CVE-2018-17190: Remote Code Execution in spark-core
Summary
CVE-2018-17190: Remote Code Execution in spark-core. Affects org.apache.spark:spark-core_2.11 versions 1.2.0 – 2.4.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Apache Spark is an open-source distributed computing system used for big data processing and analytics. It consists of a master node and multiple worker nodes. The master node accepts code to execute on the worker nodes. However, a vulnerability in the standalone resource manager of Apache Spark allows a specially-crafted request to the master node to execute code on the master itself, which is unexpected behavior. This vulnerability affects all versions of Apache Spark. Standalone clusters with authentication enabled are not affected.
Vulnerability Detail
The vulnerability in Apache Spark's standalone resource manager allows an attacker to execute arbitrary code on the master node. By sending a specially-crafted request, the attacker can exploit this vulnerability and execute code on the master node, which is not intended behavior. Although the master node typically has limited outbound access compared to worker nodes, the execution of code on the master can still have severe consequences.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in Apache Spark's standalone resource manager allows for remote code execution on the master node. To mitigate this vulnerability, it is crucial to enable authentication on Spark standalone clusters and follow the recommended security practices. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.spark:spark-core_2.11 →
FAQ
Apache Spark is an open-source distributed computing system used for big data processing and analytics. It provides a programming model and an execution engine for processing large datasets in parallel across a cluster of computers.
The vulnerability allows an attacker to execute arbitrary code on the master node of an Apache Spark standalone cluster. This can lead to unauthorized access, data breaches, and potential compromise of the entire cluster.
Yes, all versions of Apache Spark are affected by this vulnerability. It is important to apply the necessary mitigation measures to secure Spark standalone clusters.
Yes, this vulnerability can be exploited remotely by sending a specially-crafted request to the master node of a Spark standalone cluster.
The CVSS score of this vulnerability is 9.8, indicating a critical severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.spark:spark-core_2.11.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
