org.apache.tika:tika-parsers has an Infinite Loop vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-1339 · ADVISORY
• apache/tika commit 1b6ca36 · WEB
• access.redhat.com/errata/RHSA-2018:2669 · WEB
• apache/tika · PACKAGE
• lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828@%3Cdev.tika.apache.org%3E · WEB
• lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828%40%3Cdev.tika.apache.org%3E

Lỗ hổng khác của org.apache.tika:tika-parsers

• CVE-2025-66516NGHIÊM TRỌNG 9.8Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms al…
• CVE-2025-54988CAO 8.4Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to …
• CVE-2019-10093TRUNG BÌNH 6.5In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very l…
• CVE-2018-17197TRUNG BÌNH 6.5A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.