CVE-2022-33879 Incomplete fix and new regex DoS in StandardsExtractingContentHandler

🗓️ 27 Jun 2022 21:40:10Reported by GoogleType

osv🔗 osv.dev👁 33 Views

Initial fixes for CVE-2022-30126 and CVE-2022-30973 were insufficient, leading to a new regex DoS in the StandardsExtractingContentHandler. Fixed in versions 1.28.4 and 2.4.1

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	3 Aug 202219:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis vulnerable to multiple vulnerabilities in Apache Tika (CVE-2022-30126, CVE-2022-33879, CVE-2022-30973)	17 Nov 202216:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
ATTACKERKB	CVE-2022-33879	27 Jun 202222:15	–	attackerkb
Circl	CVE-2022-33879	28 Jun 202202:35	–	circl
CNNVD	Apache Tika 安全漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Apache Tika Denial of Service Vulnerability (CNVD-2022-51053)	30 Jun 202200:00	–	cnvd
CVE	CVE-2022-33879	27 Jun 202221:40	–	cve

Source	Link
lists	www.lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33879.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-33879
security	www.security.netapp.com/advisory/ntap-20220812-0004/
openwall	www.openwall.com/lists/oss-security/2022/06/27/5

15 Jul 2026 01:49Current

6.7Medium risk

Vulners AI Score6.7

CVSS 22.6

CVSS 3.13.3

EPSS0.01905