TI
Product
Tika
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 14Low 1
Watch
Add Tika to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10093 | 6.5 | Aug 2 | In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs Affected: 1.19 through 1.21 |
| CVE-2018-17197 | 6.5 | Dec 24 | A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika Affected: 1.8 through 1.19.1 |
| CVE-2018-11762 | 5.9 | Sep 19 | In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with… Affected: 0.9 through 1.18 |
| CVE-2022-30973 | 5.5 | May 31 | We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release Affected: before 1.28.3 |
| CVE-2022-30126 | 5.5 | May 16 | In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a… Affected: before 1.28.3; 2.0.0 before 2.4.0 |
| CVE-2022-25169 | 5.5 | May 16 | The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files Affected: before 1.28.2; 2.0.0 before 2.4.0 |
| CVE-2021-28657 | 5.5 | Mar 31 | A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25 Affected: through 1.25 |
| CVE-2020-9489 | 5.5 | Apr 27 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser Affected: 1.24 |
| CVE-2020-1951 | 5.5 | Mar 23 | A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23 Affected: 1.0 through 1.23 |
| CVE-2020-1950 | 5.5 | Mar 23 | A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23 Affected: 1.0 through 1.23 |
| CVE-2018-8017 | 5.5 | Sep 19 | In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser Affected: 1.2 through 1.18 |
| CVE-2018-1339 | 5.5 | Apr 25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18 Affected: before 1.18 |
| CVE-2018-1338 | 5.5 | Apr 25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18 Affected: before 1.18 |
| CVE-2015-3271 | 5.3 | Dec 15 | Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header Affected: 1.9 |
Showing 14