Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-26336
HistoryMar 04, 2022 - 12:00 a.m.

CVE-2022-26336

2022-03-0400:00:00
ubuntu.com
ubuntu.com
26
apache poi
hmef package
out of memory
tnef files
microsoft outlook
microsoft exchange server
upgrade

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.6%

JSON

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an
attacker to cause an Out of Memory exception. This package is used to read
TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an
application uses poi-scratchpad to parse TNEF files and the application
allows untrusted users to supply them, then a carefully crafted file can
cause an Out of Memory exception. This issue affects poi-scratchpad version
5.2.0 and prior versions. Users are recommended to upgrade to
poi-scratchpad 5.2.1.

Related

veracode 1
ibm 7
osv 2
cvelist 1
redhatcve 1
github 1
nvd 1
prion 1
cve 1
adobe 1
redhat 1
oracle 2
veracode
veracode
Denial Of Service (DoS)
2022-03-07 02:49:35
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache POI
2022-04-27 14:54:07
Security Bulletin: A security vulnerability has been identified in Apache poi-scratchpad shipped with IBM Tivoli Netcool Impact (CVE-2022-26336)
2022-07-04 19:16:39
Security Bulletin: Apache POI is vulnerable to a denial of service, caused by an out of memory exception flaw in the HMEF package(CVE-2022-26336)
2023-02-07 13:51:16
osv
osv
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
2022-03-05 00:00:44
CVE-2022-26336
2022-03-04 16:15:10
cvelist
cvelist
CVE-2022-26336 A carefully crafted TNEF file can cause an out of memory exception
2022-03-04 00:00:00
redhatcve
redhatcve
CVE-2022-26336
2022-03-11 18:14:31
github
github
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
2022-03-05 00:00:44
nvd
nvd
CVE-2022-26336
2022-03-04 16:15:10
prion
prion
Code injection
2022-03-04 16:15:00
cve
cve
CVE-2022-26336
2022-03-04 16:15:10
adobe
adobe
APSB23-31 : Security update available for Adobe Experience Manager
2023-06-13 00:00:00
redhat
redhat
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.6%

JSON
Related for UB:CVE-2022-26336
veracode1ibm7osv2cvelist1redhatcve1github1nvd1prion1cve1adobe1redhat1oracle2