PT-2020-2662 · Apache +2 · Apache Tika +2

Name of the Vulnerable Software and Affected Versions: Apache Tika versions 1.0 through 1.23 Description: The issue is related to excessive memory usage caused by a carefully crafted or corrupt PSD file in Apache Tika's PSDParser. This can lead to a denial of service. The estimated number of...

PT-2020-2661 · Apache +2 · Apache Tika +2

Name of the Vulnerable Software and Affected Versions: Apache Tika versions 1.0 through 1.23 Description: A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser, potentially leading to a denial of service. The issue is related to the PSDParser's handling of...

Denial Of Service (DoS)

Apache Tika parser is vulnerable to denial of service. The vulnerability exists as the value of imageResourcesSectionSize could cause excessive memory usage and potentially leads to an application crash...

The vulnerability of the Apache Tika content detection and analysis environment, due to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tika content detection and analysis engine is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Apache Tika content detection and analysis environment, related to the execution of operations beyond the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache Tika content detection and analysis engine lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Apache Tika content detection and analysis environment, related to the execution of operations beyond the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache Tika content detection and analysis engine lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Oracle Primavera Unifier Multiple Vulnerabilities (Jan 2020 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.1.x or 16.2.x prior to 16.2.16.0, or 17.7.x through 17.12.x prior to 17.12.11.2, or 18.8.x prior to 18.8.15, or 19.12.x prior to 19.12.0.1. It is, therefore, affected by...

Security Bulletin: Apache Tika as used by IBM QRadar SIEM is vulnerable to denial of service (CVE-2019-10088, CVE-2019-10093, CVE-2019-10094)

Summary Apache Tika as used by IBM QRadar SIEM is vulnerable to denial of service Vulnerability Details CVEID: CVE-2019-10093 DESCRIPTION: In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache...

tika: Incomplete fix allows for XML entity expansion resulting in denial of service

In Apache Tika 1.19 CVE-2018-11761, we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset after each parse, which, for Xerces2 parsers, as per the documentation, removes the user-specified SecurityManager and thus removes entity expansion limits after...

GHSA-MFWH-GQX8-C787 Allocation of Resources Without Limits or Throttling in Apache Tika

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

Allocation of Resources Without Limits or Throttling in Apache Tika

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later...

cloud.testload:jmeter-clickhouse-listener (=2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (=0.0.1) +173 more potentially affected by CVE-2019-10093 via org.apache.tika:tika-parsers (>=1.19 <=1.21)

org.apache.tika:tika-parsers MAVEN version =1.19, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 - com.gitee.kamismile:stone-common-ex =1.1.3 and more Source cves: CVE-2019-10093 Source advisory: OSV:GHSA-4MQ5-MJ59-QQ9C...

Allocation of Resources Without Limits or Throttling in Apache Tika

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later...

GHSA-4MQ5-MJ59-QQ9C Allocation of Resources Without Limits or Throttling in Apache Tika

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later...

Allocation of Resources Without Limits or Throttling in Apache Tika

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...

GHSA-MM7M-XG4H-6M52 Allocation of Resources Without Limits or Throttling in Apache Tika

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...

Apache Tika Buffer Overflow Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

Apache Tika Memory Overflow Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

Denial Of Service (DoS)

Apache Tika is vulnerable to denial of service DoS. The attacker can cause out of memory in RecursiveParserWrapper by providing a malicious or corrupted package/compressed file to unzip...

Denial Of Service (DoS)

Apache Tika is vulnerable to denial of service DoS. The attacker can cause a stack overflow in RecursiveParserWrapper by providing a malicious package/compressed file to unzip, generating the same file recursively...