Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.2
Apache Hive may allow remote code execution through Netty
published 28 days ago
Summary
The Apache Hive package uses the Netty networking library, which has a flaw that could let an attacker run code on your server. This could compromise the confidentiality, integrity, or availability of your data. Apply the latest Hive updates or patches that fix the Netty component as soon as possible.
What to do
- Update cleanstart apache-hive to version 3.1.3-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-hive |
< 3.1.3-r3 Fix: upgrade to 3.1.3-r3
|
Original advisory text
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
Security vulnerability affects the apache-hive package. Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-LZ91805 · OSV
Track software like this
Free during beta