title: Apache Parquet-MR potential DoS in case of malicious Parquet file
description: Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
problem types: CWE-20 Improper Input Validation
affected:
{
product: Apache Parquet
vendor: Apache Software Foundation
versions:
lessThan: Parquet-MR*, status: affected, version: 1.9.0, versionType: custom
}
workarounds: 1.12.x users should upgrade to 1.12.2
1.11.x users should upgrade to 1.11.2
Users of older release lines (<= 1.10.x) should upgrade to 1.12.2 or 1.11.2