Lucene search
Veracode Vulnerability DatabaseVERACODE:20990HistoryAug 05, 2019 - 8:19 a.m.
Denial Of Service (DoS)
2019-08-0508:19:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.004
Percentile
75.2%
Apache Tika is vulnerable to denial of service (DoS). The attacker can cause out of memory in RecursiveParserWrapper by providing a malicious or corrupted package/compressed file to unzip.
References
github.com/apache/tika/commit/b8655aad5efaef1c5d266676350f58743770fb5b
lists.apache.org/thread.html/1c63555609b737c20d1bbfa4a3e73ec488e3408a84e2f5e47e1b7e08@%3Cdev.tika.apache.org%3E
lists.apache.org/thread.html/39723d8227b248781898c200aa24b154683673287b150a204b83787d@%3Cdev.tika.apache.org%3E
lists.apache.org/thread.html/da9ee189d1756f8508d0f2386d8e25aca5a6df541739829232be8a94@%3Cdev.tika.apache.org%3E
lists.apache.org/thread.html/fb6c84fd387de997e5e366d50b0ca331a328c466432c80f8c5eed33d@%3Cdev.tika.apache.org%3E
Related
symantec
symantec
Apache Tika CVE-2019-10088 Denial of Service Vulnerability
2019-08-02 00:00:00
ubuntucve
ubuntucve
CVE-2019-10088
2019-08-02 00:00:00
debiancve
debiancve
CVE-2019-10088
2019-08-02 19:15:11
cve
cve
CVE-2019-10088
2019-08-02 19:15:11
prion
prion
Code injection
2019-08-02 19:15:00
cvelist
cvelist
CVE-2019-10088
2019-08-02 18:53:19
osv
osv
Allocation of Resources Without Limits or Throttling in Apache Tika
2019-08-06 01:43:40
CVE-2019-10088
2019-08-02 19:15:11
nvd
nvd
CVE-2019-10088
2019-08-02 19:15:11
github
github
Allocation of Resources Without Limits or Throttling in Apache Tika
2019-08-06 01:43:40
openvas
openvas
Apache Tika Server 1.7 < 1.22 Multiple Vulnerabilities
2019-08-05 00:00:00
ibm
ibm
Security Bulletin: Apache Tika as used by IBM QRadar SIEM is vulnerable to denial of service (CVE-2019-10088, CVE-2019-10093, CVE-2019-10094)
2019-12-20 08:47:33
nessus
nessus
Oracle Primavera Unifier Multiple Vulnerabilities (Jan 2020 CPU)
2020-01-30 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00