Apache IMPALA CVE-2017-9792 Information Disclosure Vulnerability

Bugtraq ID:	101173
Class:	Design Error
CVE:	CVE-2017-9792
Remote:	Yes
Local:	No
Published:	Oct 03 2017 12:00AM
Updated:	Oct 03 2017 12:00AM
Credit:	Matthew Jacobs.
Vulnerable:	Apache Impala 2.9 Apache Impala 2.8
Not Vulnerable:	Apache Impala 2.10

Apache IMPALA CVE-2017-9792 Information Disclosure Vulnerability

Apache IMPALA is prone to an information-disclosure vulnerability vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Apache Impala versions 2.8.0 and 2.9.0 are vulnerable.

Apache IMPALA CVE-2017-9792 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache IMPALA CVE-2017-9792 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache IMPALA CVE-2017-9792 Information Disclosure Vulnerability

References:

• Apache Homepage (Apache Software Foundation)
  
• Apache Impala (incubating) Homepage (Apache)
  
• Alter table set tblproperties inconsistency for 'external' (Apache)
  
• CVE-2017-9792 Apache Impala (incubating) Information Disclosure (Apache)