Lucene search
GoogleOSV:CVE-2021-28657HistoryMar 31, 2021 - 8:15 a.m.
CVE-2021-28657
2021-03-3108:15:11
Google
osv.dev
4
A carefully crafted or corrupt file may trigger an infinite loop in Tika’s MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
References
lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E
lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E
security.netapp.com/advisory/ntap-20210507-0004/
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpuoct2021.html
Related
openvas
openvas
Apache Tika Server < 1.26 DoS Vulnerability
2021-04-13 00:00:00
prion
prion
Code injection
2021-03-31 08:15:00
debiancve
debiancve
CVE-2021-28657
2021-03-31 08:15:11
veracode
veracode
Denial Of Service (DoS)
2021-04-08 02:17:50
cvelist
cvelist
CVE-2021-28657 Infinite loop in Apache Tika's MP3 parser
2021-03-31 07:35:14
github
github
Infinite loop in Apache Tika
2021-05-10 15:23:25
ubuntucve
ubuntucve
CVE-2021-28657
2021-03-31 00:00:00
nvd
nvd
CVE-2021-28657
2021-03-31 08:15:11
osv
osv
Infinite loop in Apache Tika
2021-05-10 15:23:25
redhatcve
redhatcve
CVE-2021-28657
2021-03-30 20:57:57
cve
cve
CVE-2021-28657
2021-03-31 08:15:11
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika
2021-06-25 00:36:32
nessus
nessus
Oracle Primavera Unifier (Oct 2021 CPU)
2021-10-20 00:00:00
Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2022 CPU)
2022-04-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00