Denial Of Service (DoS)

🗓️ 17 May 2022 16:11:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 36 Views

org.apache.tika vulnerability in `extractMetadata` function allowing denial of servic

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	29 Jun 202202:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tika security vulnerabilities found during Open Source Scan in IBM Content Collector for email in Content Search Services (affected, not vulnerable)	30 Dec 202221:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis susceptible to multiple vulnerabilities in Apache Tika (CVE-2020-9489, CVE-2022-25169, CVE-2021-28657)	3 Nov 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis susceptible to vulnerability in Apache Tika (CVE-2022-25169)	21 Nov 202211:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	24 Jun 202214:50	–	ibm
ATTACKERKB	CVE-2022-25169	16 May 202217:15	–	attackerkb

Vulners

Node

apache tikaRange2.0.0-ALPHA–2.3.0java

apache tikaRange1.7–1.28.1java

Source	Link
github	www.github.com/apache/tika/commit/9a144ab1666a41d469b3318025dc9a695be3ef70
github	www.github.com/apache/tika/commit/ab709a5299be867c0e603116491faaa6546ed889
github	www.github.com/advisories/GHSA-7qcq-xp2f-56f6
lists	www.lists.apache.org/thread/t3tb51sf0k2pmbnzsrrrm23z9r1c10rk
security	www.security.netapp.com/advisory/ntap-20220804-0004/
openwall	www.openwall.com/lists/oss-security/2022/05/16/4
oracle	www.oracle.com/security-alerts/cpujul2022.html
openwall	www.openwall.com/lists/oss-security/2022/05/16/4

10 Nov 2022 00:40Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

CVSS 3.15.5

EPSS0.0027