Linux Distros Unpatched Vulnerability : CVE-2018-1339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. CVE-2018-1339 Note that Nessu...

Security Bulletin: Public disclosed vulnerability from Apache Tika

Summary Public disclosed vulnerability from Apache Tika Vulnerability Details CVEID: CVE-2018-1338 Description: Apache Tika is vulnerable to a denial of service, caused by an error in BPGParser. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability ...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +664 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (>=1.0, <=1.17)

org.apache.tika:tika-parsers MAVEN version =1.0, =1.3, =1.0.1, =3.6.1, =3.11.0, =4.6.0, =0.1, =0.2.4 and more Source cves: CVE-2018-1339 Source advisory: OSV:GHSA-P699-3WGC-7H72...

es.ucm.fdi.gaia:jcolibri (>=3.0, <=3.2), es.ucm.fdi.gaia:jcolibri-recommendation (>=3.0, <=3.2.1) +14 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (0.7)

org.apache.tika:tika-parsers MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parsers and may be impacted: - es.ucm.fdi.gaia:jcolibri =3.0, =3.0, =2.2-rc1, =1.2-beta1, =1.2-beta1, =1.2-beta1, =1.2.2 and more Source...

com.day.crx:crx-server-j2ee (2.3.6), org.apache.jackrabbit:jackrabbit-jca (2.3.2) +6 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (0.10)

org.apache.tika:tika-parsers MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parsers and may be impacted: - com.day.crx:crx-server-j2ee 2.3.6 - org.apache.jackrabbit:jackrabbit-jca 2.3.2 -...

com.day.crx:crx-server-j2ee (2.3.4), de.eonas.portal.demo:content (0.1) +95 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (0.9)

org.apache.tika:tika-parsers MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parsers and may be impacted: - com.day.crx:crx-server-j2ee 2.3.4 - de.eonas.portal.demo:content 0.1 - de.eonas.portal.demo:templates 0.1...

com.day.cq:cq-compat-codeupgrade (>=1.0.4, <=1.2.10), org.apache.jackrabbit:jackrabbit-core (>=2.0-beta4, <=2.0.5) +3 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (0.5)

org.apache.tika:tika-parsers MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parsers and may be impacted: - com.day.cq:cq-compat-codeupgrade =1.0.4, =2.0-beta4, =2.0-beta4, =2.0-beta4, =2.0.5 -...

Important: Red Hat Security Advisory: Fuse 7.1 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Apache Tika Chmparser Denial Of Service (CVE-2018-1339)

A denial-of-service vulnerability exists in Apache Tika. The vulnerability is due to improper handling of a Microsoft Compiled HTML Help file during enumerating its listing chunks...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

Apache Tika <= 1.17 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities, including command execution and denial of service DoS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

CVE-2018-1339

CVE-2018-1339 affects Apache Tika's ChmParser; a carefully crafted file can trigger an infinite loop in versions prior to 1.18, causing DoS. Remediation: upgrade to Tika 1.18 or later (as indicated by multiple advisories).

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +754 more potentially affected by CVE-2018-1339 via org.apache.tika:tika-parsers (>=0.4, <=1.17)

org.apache.tika:tika-parsers MAVEN version =0.4, =1.3, =1.0.1, =4.2.0, =3.6.1, =3.11.0, =4.6.0, =5.6.100, =6.4.4 and more Source cves: CVE-2018-1339 Source advisory: MEND:CVE-2018-1339...

CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...