[jira] [Updated] (PARQUET-2094) Handle negative values in page headers

2021-12-20 Thread Gabor Szadovszky (Jira)
[ https://issues.apache.org/jira/browse/PARQUET-2094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gabor Szadovszky updated PARQUET-2094: -- External issue ID: CVE-2021-41561 External issue URL:

CVE-2021-41561: Apache Parquet-MR potential DoS in case of malicious Parquet file

2021-12-20 Thread Gábor Szádovszky
Description: Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions. This issue is being tracked as PARQUET-2094 Mitigation: 1.12.x users should