Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-0949

Malware in sbrugna...

5.5CVSS6.2AI score0.00221EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2021/05/10 3:23 p.m.52 views

Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS3.1AI score0.00221EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/05/10 3:23 p.m.30 views

GHSA-567X-M4WM-87V8 Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS5.5AI score0.00221EPSS
Exploits0References6
OSV
OSV
added 2021/05/07 3:53 p.m.38 views

GHSA-4PV3-63JW-4JW2 Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS5.9AI score0.0039EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2021/04/13 12:0 a.m.21 views

Apache Tika < 1.26 DoS Vulnerability

Apache Tika is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika";...

5.5CVSS6.2AI score0.00221EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/06 12:0 a.m.4 views

Apache Tika Denial of Service Vulnerability (CNVD-2021-29474)

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

5.5CVSS6.6AI score0.00221EPSS
Exploits0References1
OSV
OSV
added 2021/03/31 8:15 a.m.17 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6.6AI score
Exploits0References5
NVD
NVD
added 2021/03/31 8:15 a.m.16 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS0.00221EPSS
Exploits0References5
Prion
Prion
added 2021/03/31 8:15 a.m.27 views

Code injection

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

4.3CVSS5.5AI score0.00221EPSS
Exploits0References5Affected Software5
UbuntuCve
UbuntuCve
added 2021/03/31 8:15 a.m.25 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6.8AI score0.00221EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/03/31 7:35 a.m.24 views

CVE-2021-28657 Infinite loop in Apache Tika's MP3 parser

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

6AI score0.00221EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/03/31 7:35 a.m.37 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6AI score0.00221EPSS
Exploits0
CVE
CVE
added 2021/03/31 7:35 a.m.155 views

CVE-2021-28657

CVE-2021-28657 affects Apache Tika MP3Parser. A carefully crafted or corrupt MP3 file can trigger an infinite loop in MP3Parser in Tika versions up to 1.25, potentially causing a denial of service (crash). Mitigation shown in sources is to upgrade to Tika 1.26 or later. Multiple connected documen...

5.5CVSS5.6AI score0.00221EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2021/03/30 8:57 p.m.38 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS2.9AI score0.00221EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.1 views

Apache Tika 安全漏洞

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

5.5CVSS8.4AI score0.00221EPSS
Exploits0References15
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/19 5:12 a.m.25 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Tika. Vulnerability Details CVEID: CVE-2020-9489 DESCRIPTION: Apache Tika is vulnerable to a denial of service, caused by an out of memory error and infinite loop flaw in the ICNSParser, MP3Parser,...

5.5CVSS1.8AI score0.00417EPSS
Exploits0Affected Software1
OSV
OSV
added 2020/04/27 2:15 p.m.23 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.9AI score
Exploits0References5
NVD
NVD
added 2020/04/27 2:15 p.m.18 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS5.7AI score0.0039EPSS
Exploits0References5
OSV
OSV
added 2020/04/27 2:15 p.m.1 views

UBUNTU-CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.8AI score0.0039EPSS
Exploits0References3
CVE
CVE
added 2020/04/27 1:25 p.m.146 views

CVE-2020-9489

CVE-2020-9489 affects Apache Tika components including OneNoteParser, ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser and ImageParser. The issue involves crafted or corrupt files triggering System.exit, out-of-memory errors, or infinite loops. The public advisories recommend upgrading Apache Tik...

5.5CVSS6.2AI score0.0039EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder