EUVD-2019-0639

Malware in sbrugna...

SUSE CVE-2019-10088

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

GHSA-MFWH-GQX8-C787 Allocation of Resources Without Limits or Throttling in Apache Tika

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

Denial Of Service (DoS)

Apache Tika is vulnerable to denial of service DoS. The attacker can cause out of memory in RecursiveParserWrapper by providing a malicious or corrupted package/compressed file to unzip...

Code injection

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

CVE-2019-10088

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

CVE-2019-10088

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

CVE-2019-10094

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...

PT-2019-4679

Name of the Vulnerable Software and Affected Versions Apache Tika versions 1.7 through 1.21 Description A carefully crafted package or compressed file that yields the same file when unzipped or uncompressed can cause a StackOverflowError in the RecursiveParserWrapper. This issue is related to a...

PT-2019-4681

Name of the Vulnerable Software and Affected Versions Apache Tika versions 1.7 through 1.21 Description The issue is related to a buffer overflow in memory operations, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. A...

CVE-2019-10088: Allocation of Resources Without Limits or Throttling

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

CVE-2019-10094: Allocation of Resources Without Limits or Throttling

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...