←back to thread

Max severity RCE flaw discovered in widely used Apache Parquet

(www.bleepingcomputer.com)
174 points andy99 | 1 comments | 06 Apr 25 17:21 UTC | HN request time: 0s | source
Show context
3eb7988a1663 ◴[06 Apr 25 18:06 UTC] No.43603491[source]▶
Maybe the headline should note that this a parser vulnerability, not the format itself. I suppose that is obvious, but my first knee-jerk thought was, "Am I going to have to re-encode XXX piles of data?"
replies(2): >>43603869 #>>43604836 #
1. necubi ◴[06 Apr 25 20:46 UTC] No.43604836[source]▶
Also that it's in the Java parquet library, which somehow is nowhere in the article