CVE-2022-33879

🗓️ 27 Jun 2022 21:40:10Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 108 Views

Initial fixes in CVE-2022-30126 and CVE-2022-30973 were insufficient, leading to a new regex DoS in StandardsExtractingContentHandler

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	3 Aug 202219:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis vulnerable to multiple vulnerabilities in Apache Tika (CVE-2022-30126, CVE-2022-33879, CVE-2022-30973)	17 Nov 202216:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
ATTACKERKB	CVE-2022-33879	27 Jun 202222:15	–	attackerkb
Circl	CVE-2022-33879	28 Jun 202202:35	–	circl
CNNVD	Apache Tika 安全漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Apache Tika Denial of Service Vulnerability (CNVD-2022-51053)	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-33879 Incomplete fix and new regex DoS in StandardsExtractingContentHandler	27 Jun 202221:40	–	cvelist

NVD

Vulners

Node

apache tikaRange<1.28.4

apache tikaRange2.0.0–2.4.1

[
  {
    "product": "Apache Tika",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "changes": [
          {
            "at": "1.28.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "2.4.1",
        "status": "affected",
        "version": "Apache Tika",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
security	www.security.netapp.com/advisory/ntap-20220812-0004/
openwall	www.openwall.com/lists/oss-security/2022/06/27/5

21 Nov 2024 07:08Current

4.9Medium risk

Vulners AI Score4.9

CVSS 22.6

CVSS 3.13.3

EPSS0.00027