CVE-2020-9489

🗓️ 27 Apr 2020 13:25:27Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 145 Views

A file can trigger System.exit in Tika's OneNote Parser, leading to memory errors and infinite loops

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	19 Jun 202005:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Incident Forensics is vulnerable to using component with known vulnerabilities	7 Oct 202020:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis susceptible to multiple vulnerabilities in Apache Tika (CVE-2020-9489, CVE-2022-25169, CVE-2021-28657)	3 Nov 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Solr, shipped with IBM Operations Analytics - Log Analysis, susceptible to multiple vulnerabilities in Apache Tika	4 Oct 202106:40	–	ibm
CNVD	Apache Tika Memory Overflow Vulnerability (CNVD-2020-33326)	28 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-9489	27 Apr 202013:25	–	cvelist
Debian CVE	CVE-2020-9489	27 Apr 202013:25	–	debiancve
EUVD	EUVD-2021-0946	7 Oct 202500:30	–	euvd
Github Security Blog	Missing Release of Memory after Effective Lifetime in Apache Tika	7 May 202115:53	–	github

NVD

Vulners

Node

apache tikaMatch1.24

Node

oracle flexcube_private_bankingMatch12.0.0

oracle flexcube_private_bankingMatch12.1.0

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle primavera_unifierMatch19.12

oracle webcenter_portalMatch12.2.1.3.0

oracle webcenter_portalMatch12.2.1.4.0

oracle communications_messaging_serverMatch8.1

[
  {
    "product": "Apache Tika",
    "vendor": "The Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Up to 1.24"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.apache.org/thread.html/r4d943777e36ca3aa6305a45da5acccc54ad894f2d5a07186cfa2442c%40%3Cdev.tika.apache.org%3E

21 Nov 2024 05:40Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 3.15.5

EPSS0.0039

CWE-835