Lucene search
+L

558 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2020/06/19 5:12 a.m.•36 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Tika. Vulnerability Details CVEID: CVE-2020-9489 DESCRIPTION: Apache Tika is vulnerable to a denial of service, caused by an out of memory error and infinite loop flaw in the ICNSParser, MP3Parser,...

5.5CVSS1.8AI score0.02986EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/10 12:00 a.m.•13 views

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment allows a attacker to cause a service failure.

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures using a specially created PSD file...

5.5CVSS6.7AI score0.02986EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/06/10 12:00 a.m.•11 views

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment allows a attacker to cause a service failure.

The vulnerability of the PSDParser parser in the Apache Tika content discovery and analysis environment is related to input entering an infinite loop. Exploiting this vulnerability can allow attackers to cause a service failure using a specially created PSD file...

5.5CVSS6.7AI score0.02892EPSS
SaveExploits0References6Affected Software5
CNVD
CNVD
•added 2020/04/28 12:00 a.m.•22 views

Apache Tika Memory Overflow Vulnerability (CNVD-2020-33326)

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

5.5CVSS9.2AI score0.02614EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/27 2:15 p.m.•32 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS5.7AI score0.02614EPSS
SaveExploits0References5
OSV
OSV
•added 2020/04/27 2:15 p.m.•18 views

DEBIAN-CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.8AI score0.02614EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/27 2:15 p.m.•42 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.9AI score
SaveExploits0References5
Prion
Prion
•added 2020/04/27 2:15 p.m.•26 views

Design/Logic Flaw

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

4.3CVSS5.8AI score0.02614EPSS
SaveExploits0References5Affected Software5
UbuntuCve
UbuntuCve
•added 2020/04/27 2:15 p.m.•46 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.8AI score0.02614EPSS
SaveExploits0References2
CVE
CVE
•added 2020/04/27 1:25 p.m.•191 views

CVE-2020-9489

CVE-2020-9489 affects Apache Tika components including OneNoteParser, ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser and ImageParser. The issue involves crafted or corrupt files triggering System.exit, out-of-memory errors, or infinite loops. The public advisories recommend upgrading Apache Tik...

5.5CVSS6.2AI score0.02614EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2020/04/27 1:25 p.m.•84 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS7.6AI score0.02614EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/04/27 1:25 p.m.•48 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

6AI score0.02614EPSS
SaveExploits0References5
Veracode
Veracode
•added 2020/04/27 12:54 p.m.•30 views

Denial Of Service (DoS)

Apache Tika is vulnerable to denial of service DoS. When an attacker parses a malicious file as input, it invokes a System.exit in Tika's OneNote Parser, subsequently causing an infinite loops or out of memory exceptions in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser an...

5.5CVSS4.9AI score0.02614EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/27 12:00 a.m.•3 views

CVE-2020-9489: Loop with Unreachable Exit Condition

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.5AI score0.02614EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/24 12:00 a.m.•9 views

PT-2020-4628 · Apache +1 · Apache Tika +1

Name of the Vulnerable Software and Affected Versions: Apache Tika versions prior to 1.24.1 Description: A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParse...

5.5CVSS6.7AI score0.02614EPSS
SaveExploits0References24
RedhatCVE
RedhatCVE
•added 2020/04/09 7:09 p.m.•33 views

CVE-2020-1950

A flaw was found in Apache Tika’s PSDParser, where a carefully crafted or corrupt PSD file can cause excessive memory usage. The highest threat from this vulnerability is to system availability...

5.5CVSS2.3AI score0.02986EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/03/24 12:00 a.m.•88 views

Apache Tika Denial of Service Attack Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

5.5CVSS9.1AI score0.02892EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/03/24 12:00 a.m.•49 views

Apache Tika 1.x <= 1.23 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika"; ifdescription...

5.5CVSS6.7AI score0.02986EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/23 2:15 p.m.•24 views

CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS5.4AI score0.02986EPSS
SaveExploits0References5
OSV
OSV
•added 2020/03/23 2:15 p.m.•31 views

CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS6.6AI score
SaveExploits0References5
Rows per page
Query Builder