Uncontrolled Resource Consumption in Apache Tika

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-1950 · ADVISORY
• apache/tika · PACKAGE
• lists.apache.org/thread.html/r463b1a67817ae55fe022536edd6db34e8f9636971188430cbcf8a8dd%40%3Cdev.tika.apache.org%3E · WEB
• lists.debian.org/debian-lts-announce/2020/03/msg00035.html · WEB
• usn.ubuntu.com/4564-1 · WEB
• oracle.com/security-alerts/cpujul2020.html · WEB
• oracle.com/security-alerts/cpuoct2020.html · WEB
• usn.ubuntu.com/4564-1 · Third Party Advisory

Lỗ hổng khác của org.apache.tika:tika

• CVE-2022-33879THẤP 3.3The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found …
• CVE-2022-25169TRUNG BÌNH 5.5The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
• CVE-2021-28657TRUNG BÌNH 5.5A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should…
• CVE-2020-9489TRUNG BÌNH 5.5A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of mem…
• CVE-2020-1951TRUNG BÌNH 5.5A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.