Lucene search
Redhat.comRH:CVE-2020-9489HistoryJun 23, 2020 - 1:25 p.m.
CVE-2020-9489
2020-06-2313:25:32
redhat.com
access.redhat.com
7
0.001 Low
EPSS
Percentile
23.6%
A carefully crafted or corrupt file may trigger a System.exit in Tika’s OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika’s ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade to 1.24.1 or later. The vulnerabilities in the MP4Parser were partially fixed by upgrading the com.googlecode:isoparser:1.1.22 dependency to org.tallison:isoparser:1.9.41.2. For unrelated security reasons, we upgraded org.apache.cxf to 3.3.6 as part of the 1.24.1 release.
Related
prion
prion
Design/Logic Flaw
2020-04-27 14:15:00
veracode
veracode
Denial Of Service (DoS)
2020-04-27 12:54:57
ubuntucve
ubuntucve
CVE-2020-9489
2020-04-27 00:00:00
osv
osv
Missing Release of Memory after Effective Lifetime in Apache Tika
2021-05-07 15:53:40
CVE-2020-9489
2020-04-27 14:15:11
github
github
Missing Release of Memory after Effective Lifetime in Apache Tika
2021-05-07 15:53:40
nvd
nvd
CVE-2020-9489
2020-04-27 14:15:11
cve
cve
CVE-2020-9489
2020-04-27 14:15:11
debiancve
debiancve
CVE-2020-9489
2020-04-27 14:15:11
cvelist
cvelist
CVE-2020-9489
2020-04-27 13:25:27
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika
2020-06-19 05:12:26
nessus
nessus
Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2021 CPU)
2021-04-22 00:00:00
Oracle Primavera Unifier (Oct 2020 CPU)
2020-10-21 00:00:00
redhat
redhat
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00