CVE-2022-0904 Stack overflow in document extractor in Mattermost

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document...

CVE-2022-0904: Out-of-bounds Write

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document...

PT-2022-13516 · Mattermost +1 · Mattermost Server +1

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions up to and including 6.3.2 Description: A stack overflow bug in the document extractor allows an attacker to crash the server by submitting a maliciously crafted Apple Pages document. Recommendations: For versions up...

XML External Entity (XXE) Injection

org.apache.any23:apache-any23-core is vulnerable to XML external entity XXE injection attacks. An attacker is able to view files and to interact with any back-end or external systems that the application itself can access due to the vulnerable RDFa XSLTStylesheet extractor component...

CVE-2022-25312

An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...

CVE-2022-25312

The CVE-2022-25312 vulnerability concerns the Apache Any23 project, specifically the RDFa XSLTStylesheet extractor. Affected versions are Any23

com.gizbel.excel:excel-extractor (>=1.0.0, <=1.0.1) potentially affected by CVE-2022-23640 via com.monitorjbl:xlsx-streamer (1.0.1)

com.monitorjbl:xlsx-streamer MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.monitorjbl:xlsx-streamer and may be impacted: - com.gizbel.excel:excel-extractor =1.0.0, =1.0.1 Source cves: CVE-2022-23640 Source advisory:...

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

Denial Of Service (DoS)

metadata-extractor is vulnerable to denial of service. The vulnerability exists because the library does not properly handle memory allocation, allowing an attacker to send malicious input to cause large amounts of memory allocation and an application crash...

GHSA-4V6P-CXF9-98RF Allocation of Resources Without Limits or Throttling in metadata-extractor

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24613 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24613 Source advisory: GHSA-P5PG-WM9Q-8V6R...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24614 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24614 Source advisory: GHSA-4V6P-CXF9-98RF...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24613 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24613 Source advisory: OSV:GHSA-P5PG-WM9Q-8V6R...

Improper Handling of Exceptional Conditions inn metadata-extractor

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

GHSA-P5PG-WM9Q-8V6R Improper Handling of Exceptional Conditions inn metadata-extractor

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24614 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24614 Source advisory: OSV:GHSA-4V6P-CXF9-98RF...

DEBIAN-CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

DEBIAN-CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...