Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Apache Hive could let attackers execute code via Netty

published 28 days ago
Summary

The Apache Hive software includes a component called Netty that has a security flaw. An attacker could potentially run malicious code on the server hosting Hive, leading to data loss or system compromise. Apply the latest Hive updates or patches that fix the Netty issue as soon as possible.

What to do
  • Update cleanstart apache-hive to version 3.1.3-r3.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart apache-hive < 3.1.3-r3
Fix: upgrade to 3.1.3-r3
Original advisory text
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-VN95334 · OSV
Track software like this
Free during beta