Lucene search
+L

607 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 12:00 a.m.37 views

Regular expression denial of service in apache tika

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.4AI score0.0261EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2022/05/17 12:00 a.m.8 views

GHSA-RPJM-422R-95MH Regular expression denial of service in apache tika

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.4AI score0.0261EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/05/17 12:00 a.m.39 views

Apache Tika vulnerable to uncontrolled memory consumption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS3.5AI score0.0212EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/17 12:00 a.m.51 views

GHSA-7QCQ-XP2F-56F6 Apache Tika vulnerable to uncontrolled memory consumption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS5.6AI score0.0212EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/05/17 12:00 a.m.30 views

Apache Tika < 1.28.2, 2.x < 2.4.0 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika"; ifdescription...

5.5CVSS5.2AI score0.0261EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/16 5:15 p.m.18 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS0.0261EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/16 5:15 p.m.6 views

DEBIAN-CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.8AI score0.0261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/16 5:15 p.m.4 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.3AI score0.0261EPSS
SaveExploits0References7
NVD
NVD
added 2022/05/16 5:15 p.m.25 views

CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS0.0212EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/16 5:15 p.m.2 views

DEBIAN-CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.6AI score0.0212EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/16 5:15 p.m.28 views

Code injection

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

4.3CVSS4.4AI score0.0261EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2022/05/16 5:15 p.m.7 views

UBUNTU-CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.4AI score0.0212EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/16 5:15 p.m.33 views

Memory corruption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

4.3CVSS5.5AI score0.0212EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/05/16 5:15 p.m.7 views

UBUNTU-CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.8AI score0.0261EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/05/16 5:15 p.m.19 views

CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.7AI score0.0212EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/05/16 5:05 p.m.40 views

CVE-2022-30126 Apache Tika Regular Expression Denial of Service in Standards Extractor

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

4.9AI score0.0261EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/05/16 5:05 p.m.39 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS4.7AI score0.0261EPSS
SaveExploits0
OSV
OSV
added 2022/05/16 5:05 p.m.41 views

CVE-2022-30126 Apache Tika Regular Expression Denial of Service in Standards Extractor

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

6.4AI score
SaveExploits0References8
CVE
CVE
added 2022/05/16 5:05 p.m.217 views

CVE-2022-30126

Apache Tika CVE-2022-30126 is a ReDoS via a regex in StandardsText used by the StandardsExtractingContentHandler. The issue can cause denial of service on crafted files and only affects users running the StandardsExtractingContentHandler (a non-standard handler). A fix is available in Tika versio...

5.5CVSS4.5AI score0.0261EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2022/05/16 5:05 p.m.34 views

CVE-2022-25169 Apache Tika BPGParser Memory Usage DoS

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

6AI score0.0212EPSS
SaveExploits0References4
Rows per page
Query Builder