MacMusic  |  PcMusic  |  440 Software  |  440 Forums  |  440TV  |  Zicos
parquet
Search

Critical deserialization bug in Apache Parquet allows RCE

Friday April 4, 2025. 10:01 PM , from InfoWorld
A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances.

The vulnerability, tracked as CVE-2025-30065, is a deserialization issue (CWE-502) in Parquet’s Java library that allows execution of maliciously crafted Parquet files.

Continue reading on CSOonline.com.
Read more at InfoWorld
https://www.csoonline.com/article/3954647/big-hole-in-big-data-critical-deserialization-bug-in-apach...

Related News

parquet CISA extends funding to ensure ‘no lapse in critical CVE services’ OS NewsApr 16
allows CISA Extends Funding To Ensure 'No Lapse in Critical CVE Services' SlashdotApr 16
apache AI for Good: Microsoft’s Critical Support in Mapping Myanmar’s Earthquake Damage eWeekApr 3
deserialization Politically motivated DDoS attacks target critical infrastructure BetaNewsApr 2
critical CrushFTP CEO's feisty response to VulnCheck's CVE for critical make-me-admin bug TheRegisterMar 27
code Critical RCE flaws put Kubernetes clusters at risk of takeover InfoWorldMar 26
rce Trump Admin Plans to Cut Team Responsible for Critical Atomic Measurement Data Wired: Tech.Mar 25
bug Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist TheRegisterMar 20
parquet French scientist denied entry to US after a search of his phone revealed messages critical of Trump BoingBoingMar 20
allows IBM scores perfect 10 ... vulnerability in mission-critical OS AIX TheRegisterMar 19
apache FTC Removes Posts Critical of Amazon, Microsoft, and AI Companies SlashdotMar 18
deserialization FTC Removes Posts Critical of Amazon, Microsoft, and AI Companies Wired: Tech.Mar 18
critical 'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild' TheRegisterMar 18
code Developer wrote a critical app and forgot where it ran – until it stopped running TheRegisterMar 17
rce Codon Python Compiler Gets Faster - and Changes to Apache 2 License SlashdotMar 16
bug Meta Stops Ex-Director From Promoting Critical Memoir SlashdotMar 13
parquet Regulation and its role in protecting critical infrastructure [Q&A] BetaNewsMar 12
allows Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws TheRegisterMar 12
apache Beyond DeepSeek: 3 critical questions for the future of AI BetaNewsMar 7
News copyright owned by their original publishers | Copyright © 2004 - 2025 Zicos / 440Network
Current Date
Apr, Mon 28 - 02:41 CEST