The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment allows a attacker to cause a service failure.

🗓️ 10 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

PSDParser flaw in Apache Tika can trigger infinite loop via crafted PSD, causing service failure.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	19 Jun 202005:12	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tika as used by IBM QRadar SIEM is vulnerable to a denial of service (CVE-2020-1951, CVE-2020-1950)	13 Jul 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	11 Jan 202221:02	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Solr, shipped with IBM Operations Analytics - Log Analysis, susceptible to multiple vulnerabilities in Apache Tika	4 Oct 202106:40	–	ibm
CNVD	Apache Tika Denial of Service Attack Vulnerability	24 Mar 202000:00	–	cnvd
CVE	CVE-2020-1951	23 Mar 202013:26	–	cve
Cvelist	CVE-2020-1951	23 Mar 202013:26	–	cvelist
Debian	[SECURITY] [DLA 2161-1] tika security update	28 Mar 202021:12	–	debian
Debian CVE	CVE-2020-1951	23 Mar 202013:26	–	debiancve
Tenable Nessus	Debian DLA-2161-1 : tika security update	30 Mar 202000:00	–	nessus

Vulners

Node

oracle business_process_management_suiteMatch12.2.1.3.0

OR

apache tikaRange1.0–1.23

OR

oracle oracle_communications_messaging_serverMatch8.0.2

OR

oracle oracle_communications_messaging_serverMatch8.1.0

OR

oracle oracle_flexcube_private_bankingMatch12.0.0

OR

oracle oracle_flexcube_private_bankingMatch12.1.0

OR

oracle business_process_management_suiteMatch12.2.1.4.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1951
lists	www.lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf77031323172%40%3Cdev.tika.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00035.html
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
web	www.web.nvd.nist.gov/view/vuln/detail

11 Nov 2020 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.9

CVSS 35.5

EPSS0.02723

photoshop document parser apache tika infinite loop crafted photoshop file