{"id":"CVE-2017-7669","details":"In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.","aliases":["GHSA-h24p-qwf4-84q8"],"modified":"2026-07-08T16:53:42.493394Z","published":"2017-06-05T01:29:00.537Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98795"},{"type":"ADVISORY","url":"https://mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/hadoop","events":[{"introduced":"91f2b7a13d1e97be65db92ddabc627cc29ac0009"},{"last_affected":"1337ef4eef14fbbb214e71b68b7eb07061a4a212"}],"database_specific":{"cpe":["cpe:2.3:a:apache:hadoop:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.8.0"},{"last_affected":"2.8.0"},{"introduced":"3.0.0-alpha1"},{"last_affected":"3.0.0-alpha1"},{"introduced":"3.0.0-alpha2"},{"last_affected":"3.0.0-alpha2"}],"source":"CPE_STRING"}}],"versions":["2.8.0","3.0.0-alpha1","3.0.0-alpha2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7669.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}