CVE-2020-9489

🗓️ 27 Apr 2020 14:15:11Reported by [email protected]Type

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's parsers

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	19 Jun 202005:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Incident Forensics is vulnerable to using component with known vulnerabilities	7 Oct 202020:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis susceptible to multiple vulnerabilities in Apache Tika (CVE-2020-9489, CVE-2022-25169, CVE-2021-28657)	3 Nov 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Solr, shipped with IBM Operations Analytics - Log Analysis, susceptible to multiple vulnerabilities in Apache Tika	4 Oct 202106:40	–	ibm
BDU FSTEC	The vulnerability of the Apache Tika content detection and analysis environment, related to memory leaks before deleting the last link, allows attackers to cause service interruptions.	17 Nov 202000:00	–	bdu_fstec
CNVD	Apache Tika Memory Overflow Vulnerability (CNVD-2020-33326)	28 Apr 202000:00	–	cnvd
CVE	CVE-2020-9489	27 Apr 202013:25	–	cve
Cvelist	CVE-2020-9489	27 Apr 202013:25	–	cvelist
Debian CVE	CVE-2020-9489	27 Apr 202013:25	–	debiancve

NVD

Node

apache tikaMatch1.24

Node

oracle flexcube_private_bankingMatch12.0.0

oracle flexcube_private_bankingMatch12.1.0

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle primavera_unifierMatch19.12

oracle webcenter_portalMatch12.2.1.3.0

oracle webcenter_portalMatch12.2.1.4.0

oracle communications_messaging_serverMatch8.1

Source	Link
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
lists	www.lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E
lists	www.lists.apache.org/thread.html/r4d943777e36ca3aa6305a45da5acccc54ad894f2d5a07186cfa2442c%40%3Cdev.tika.apache.org%3E

21 Nov 2024 05:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

CVSS 3.15.5

EPSS0.0039