CVE-2016-6809: Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files

Critical severity · published Apr 6, 2017

CVE-2016-6809

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files

9.8

CVSS

EPSS

On KEV

Description

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)8.0% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Nutch · Apache

2.3.1 · source: NVD

Tika · Apache

through 1.13 · source: NVD

Affected product

Nutch

Apache

All Nutch CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-6809

CVE.org

https://www.cve.org/CVERecord?id=CVE-2016-6809

Mailing List

http://seclists.org/bugtraq/2016/Nov/40

Third Party Advisory

http://www.securityfocus.com/bid/94247

Release Notes

https://dist.apache.org/repos/dist/release/tika/CHANGES-1.14.txt

lists.apache.org

https://lists.apache.org/thread.html/91eb639ef619b9a26b40020ca6732e7dbe457f7322ed5f1df49e411a%40%3Cdev.nutch.apache.org%3E

lists.apache.org

https://lists.apache.org/thread.html/d2375da29d89e679abf5d845db76d6f798fdc6f7d44f2c788e8a0fb9%40%3Cuser.nutch.apache.org%3E

lists.apache.org

https://lists.apache.org/thread.html/e414754a6c57ce7194b731e211cd6b2cbb41f2c7000e3fb9c6b6ec78%40%3Cdev.lucene.apache.org%3E