Linux Distros Unpatched Vulnerability : CVE-2018-1338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. CVE-2018-1338 Note that Nessu...

Security Bulletin: Public disclosed vulnerability from Apache Tika

Summary Public disclosed vulnerability from Apache Tika Vulnerability Details CVEID: CVE-2018-1338 Description: Apache Tika is vulnerable to a denial of service, caused by an error in BPGParser. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability ...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0) +1565 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (>=1.0, <=1.17)

org.apache.tika:tika-core MAVEN version =1.0, =1.3, =1.0.0, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2018-1338 Source advisory: GHSA-5MF7-26MW-3RQR...

com.github.greengerong:webdriver-accessibility-check (1.0), de.eonas.portal.demo:content (0.1) +140 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.9)

org.apache.tika:tika-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.github.greengerong:webdriver-accessibility-check 1.0 - de.eonas.portal.demo:content 0.1 -...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0) +1565 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (>=1.0, <=1.17)

org.apache.tika:tika-core MAVEN version =1.0, =1.3, =1.0.0, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2018-1338 Source advisory: OSV:GHSA-5MF7-26MW-3RQR...

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), com.adobe.cq.testing:cq-it-framework (2.0.130) +65 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.8)

org.apache.tika:tika-core MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment =4.2.0, =2.2.0, =0.3.1, =1.0.0,...

es.ucm.fdi.gaia:jcolibri (>=3.0, <=3.2), es.ucm.fdi.gaia:jcolibri-recommendation (>=3.0, <=3.2.1) +15 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.7)

org.apache.tika:tika-core MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - es.ucm.fdi.gaia:jcolibri =3.0, =3.0, =2.2-rc1, =1.2-beta1, =1.2-beta1, =1.2.2 and more Source cves: CVE-2018-13...

com.day.crx:crx-auth-ldap (2.3.6), com.day.crx:crx-server (2.3.6) +16 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.10)

org.apache.tika:tika-core MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.day.crx:crx-auth-ldap 2.3.6 - com.day.crx:crx-server 2.3.6 - com.day.crx:crx-server-j2ee 2.3.6 -...

org.apache.jackrabbit:jackrabbit-core (>=2.0-beta1, <=2.0-beta3), org.apache.jackrabbit:jackrabbit-jca (>=2.0-beta1, <=2.0-beta3) +9 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.4)

org.apache.tika:tika-core MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - org.apache.jackrabbit:jackrabbit-core =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =1.4.0,...

com.adobe.cq.commerce:cq-commerce-hybris-impl (>=5.6.100, <=6.4.4), com.adobe.cq.media:cq-media-publishing-dps-integration (5.6.16) +36 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.6)

org.apache.tika:tika-core MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.adobe.cq.commerce:cq-commerce-hybris-impl =5.6.100, =2.0.6, =1.0.10, =1.0.8, =1.0.8, =1.0.12, =2.1.0, =2.1....

Important: Red Hat Security Advisory: Fuse 7.1 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Apache Tika <= 1.17 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities, including command execution and denial of service DoS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

UBUNTU-CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0) +1647 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (>=0.4, <=1.17)

org.apache.tika:tika-core MAVEN version =0.4, =1.3, =1.0.0, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2018-1338 Source advisory: MEND:CVE-2018-1338...

CVE-2018-1338

CVE-2018-1338 : Apache Tika is vulnerable to a denial of service via a carefully crafted (or fuzzed) file that can trigger an infinite loop in the BPGParser in Tika versions before 1.18. The provided documents confirm the affected component (BPGParser in Apache Tika), the vulnerability type (infi...