Apache Tika Denial of Service Vulnerability (CNVD-2021-29474)

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

DEBIAN-CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

UBUNTU-CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

Apache Tika 安全漏洞

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

tika-core: Denial of Service Vulnerabilities in Some of Apache Tika's Parsers

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

tika: excessive memory usage in PSDParser

A flaw was found in Apache Tika’s PSDParser, where a carefully crafted or corrupt PSD file can cause excessive memory usage. The highest threat from this vulnerability is to system availability...

The vulnerability of the Apache Tika content detection and analysis environment, related to memory leaks before deleting the last link, allows attackers to cause service interruptions.

The vulnerability of the Apache Tika content detection and analysis environment is related to memory leaks that occur before the last link is deleted. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: IBM QRadar Incident Forensics is vulnerable to using component with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2018-8009 DESCRIPTION: Apache Hadoop could could allow a remote attacker to traverse directories on the system. By persuading a...

USN-4564-1 tika vulnerabilities

It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could use it to cause a denial of service crash. CVE-2020-1950, CVE-2020-1951...

USN-4564-1: Apache Tika vulnerabilities

It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could use it to cause a denial of service crash. CVE-2020-1950, CVE-2020-1951...

Ubuntu 16.04 LTS : Apache Tika vulnerabilities (USN-4564-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4564-1 advisory. It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could use it to cause a denial ...

Security Bulletin: Apache Tika as used by IBM QRadar SIEM is vulnerable to a denial of service (CVE-2020-1951, CVE-2020-1950)

Summary Apache Tika as used by IBM QRadar SIEM is vulnerable to a denial of service Vulnerability Details CVEID: CVE-2020-1951 DESCRIPTION: Apache Tika is vulnerable to a denial of service, caused by an error in the PSDParser. By persuading a victim to open a specially-crafted PSD file, a remote...

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Tika. Vulnerability Details CVEID: CVE-2020-9489 DESCRIPTION: Apache Tika is vulnerable to a denial of service, caused by an out of memory error and infinite loop flaw in the ICNSParser, MP3Parser,...

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment allows a attacker to cause a service failure.

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment is related to input entering an infinite loop. Exploiting this vulnerability can allow attackers to cause a service failure using a specially created PSD file...

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment allows a attacker to cause a service failure.

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures using a specially created PSD file...