MacMusic  |  PcMusic  |  440 Software  |  440 Forums  |  440TV  |  Zicos
parquet
Search

Critical deserialization bug in Apache Parquet allows RCE

Friday April 4, 2025. 10:01 PM , from InfoWorld
A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances.

The vulnerability, tracked as CVE-2025-30065, is a deserialization issue (CWE-502) in Parquet’s Java library that allows execution of maliciously crafted Parquet files.

Continue reading on CSOonline.com.
Read more at InfoWorld
https://www.csoonline.com/article/3954647/big-hole-in-big-data-critical-deserialization-bug-in-apach...

Related News

parquet AI for Good: Microsoft’s Critical Support in Mapping Myanmar’s Earthquake Damage eWeekApr 3
allows Politically motivated DDoS attacks target critical infrastructure BetaNewsApr 2
apache CrushFTP CEO's feisty response to VulnCheck's CVE for critical make-me-admin bug TheRegisterMar 27
deserialization Critical RCE flaws put Kubernetes clusters at risk of takeover InfoWorldMar 26
critical Trump Admin Plans to Cut Team Responsible for Critical Atomic Measurement Data Wired: Tech.Mar 25
code Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist TheRegisterMar 20
rce French scientist denied entry to US after a search of his phone revealed messages critical of Trump BoingBoingMar 20
bug IBM scores perfect 10 ... vulnerability in mission-critical OS AIX TheRegisterMar 19
parquet FTC Removes Posts Critical of Amazon, Microsoft, and AI Companies SlashdotMar 18
allows FTC Removes Posts Critical of Amazon, Microsoft, and AI Companies Wired: Tech.Mar 18
apache 'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild' TheRegisterMar 18
deserialization Developer wrote a critical app and forgot where it ran – until it stopped running TheRegisterMar 17
critical Codon Python Compiler Gets Faster - and Changes to Apache 2 License SlashdotMar 16
code Meta Stops Ex-Director From Promoting Critical Memoir SlashdotMar 13
rce Regulation and its role in protecting critical infrastructure [Q&A] BetaNewsMar 12
bug Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws TheRegisterMar 12
parquet Beyond DeepSeek: 3 critical questions for the future of AI BetaNewsMar 7
News copyright owned by their original publishers | Copyright © 2004 - 2025 Zicos / 440Network
Current Date
Apr, Mon 7 - 07:13 CEST