[SECURITY] Fedora 28 Update: tika-1.17-1.fc28

The Apache Tika toolkit detects and extracts meta-data and structured text content from various documents using existing parser libraries...

CVE-2018-1338

An infinite loop vulnerability was discovered in Apache Tika prior to version 1.18. A remote attacker could exploit this to cause a denial of service via crafted file...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

Denial Of Service (DoS) Via Infinite Loop

Apache Tika parsers are susceptible to denial of service DoS. The attacker can trigger an infinite loop in the BPG parser by passing a malicious file...

Denial Of Service (DoS)

Apache Tika parsers are susceptible to denial of service DoS attacks. The attacker can input a malicious file to trigger an infinite loop in ChmParser...

Apache Tika infinite loop vulnerability (CNVD-2018-10140)

Apache Tika can leverage existing parsing libraries to detect and extract metadata and structured content from documents in different formats e.g. HTML, PDF, Doc. An infinite loop vulnerability exists in BPGParser in Apache Tika before 1.18. An attacker can exploit this vulnerability via speciall...

Apache Tika Infinite Loop Vulnerability

Apache Tika can leverage existing parsing libraries to detect and extract metadata and structured content from documents in different formats e.g. HTML, PDF, Doc. An infinite loop vulnerability exists in ChmParser in Apache Tika before 1.18. An attacker can exploit this vulnerability via speciall...

Apache Tika Command Injection Vulnerability

Apache Tika can leverage existing parsing libraries to detect and extract metadata and structured content from documents in different formats e.g., HTML, PDF, Doc. A command injection vulnerability exists in Apache Tika versions 1.7 through 1.17. An attacker can send a specially crafted header to...

Apache Tika <= 1.17 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities, including command execution and denial of service DoS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Design/Logic Flaw

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...

CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...

DEBIAN-CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

Code injection

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

Code injection

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...