CVE-2021-28657 Infinite loop in Apache Tika's MP3 parser

🗓️ 31 Mar 2021 07:35:14Reported by apacheType

Infinite loop in Apache Tika's MP3 parser CVE-2021-2865

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	23 Jul 202113:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis susceptible to multiple vulnerabilities in Apache Tika (CVE-2020-9489, CVE-2022-25169, CVE-2021-28657)	3 Nov 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	11 Jan 202221:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	25 Jun 202100:36	–	ibm
CNNVD	Apache Tika 安全漏洞	30 Mar 202100:00	–	cnnvd
CNVD	Apache Tika Denial of Service Vulnerability (CNVD-2021-29474)	6 Apr 202100:00	–	cnvd
CVE	CVE-2021-28657	31 Mar 202107:35	–	cve
Debian CVE	CVE-2021-28657	31 Mar 202107:35	–	debiancve
EUVD	EUVD-2021-0949	7 Oct 202500:30	–	euvd

[
  {
    "product": "Apache Tika",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.26",
        "status": "affected",
        "version": "Apache Tika",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210507-0004/
lists	www.lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2021.html
lists	www.lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html

03 Aug 2024 21:48Current

6Medium risk

Vulners AI Score6

EPSS0.02752

CWE-835