En resumen
- CVE-2022-25169 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a org.apache.tika:tika, tika (apache), primavera unifier (oracle).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.5% de las vulnerabilidades.
- Solución: actualizar a 2.4.0, 1.28.2 o posterior.
| Package | Affected versions | Patched versions |
|---|
| org.apache.tika:tika Maven | ≥ 2.0.0, < 2.4.0< 1.28.2
| 2.4.01.28.2
|
| tika | ≥ 2.0.0, < 2.4.0< 1.28.2
| 2.4.01.28.2
|
| primavera unifier | = 18.8= 19.12= 20.12= 21.12≥ 17.7, ≤ 17.12
| No fix yet |
Description
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
NVD description
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
Más vulnerabilidades de org.apache.tika:tika
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free