Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Apache Hive may experience crashes due to Apache MINA issue

published 28 days ago
Summary

The Apache Hive software includes a component called Apache MINA that has a flaw which could cause the application to stop working or behave unpredictably when crafted data is processed. This could affect your Hive queries and downstream processes. Apply the latest Hive update that includes the MINA fix, or follow the vendor’s instructions to patch the component as soon as possible.

What to do
  • Update cleanstart apache-hive to version 3.1.3-r3.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart apache-hive < 3.1.3-r3
Fix: upgrade to 3.1.3-r3
Original advisory text
fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-hive package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-SB27821 · OSV
Track software like this
Free during beta