Lucene search
Veracode Vulnerability DatabaseVERACODE:29934HistoryApr 08, 2021 - 2:17 a.m.
Denial Of Service (DoS)
2021-04-0802:17:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
34.8%
tika-parsers is vulnerable to denial of service (DoS). The vulnerability exists through an infinite loop when parsing an MP3 lyrics with a tagLen lesser than 1, or larger than the lyrics’ length.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache tika parser modules | le | 1.25 | |
| apache tika parser modules | le | 1.25 |
References
github.com/apache/tika/commit/26a9965659921a8aa4205393479584372db7cb35
lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E
lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E
security.netapp.com/advisory/ntap-20210507-0004/
www.openwall.com/lists/oss-security/2021/03/30/3
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpuoct2021.html
Related
osv
osv
CVE-2021-28657
2021-03-31 08:15:11
Infinite loop in Apache Tika
2021-05-10 15:23:25
openvas
openvas
Apache Tika Server < 1.26 DoS Vulnerability
2021-04-13 00:00:00
prion
prion
Code injection
2021-03-31 08:15:00
debiancve
debiancve
CVE-2021-28657
2021-03-31 08:15:11
cvelist
cvelist
CVE-2021-28657 Infinite loop in Apache Tika's MP3 parser
2021-03-31 07:35:14
github
github
Infinite loop in Apache Tika
2021-05-10 15:23:25
ubuntucve
ubuntucve
CVE-2021-28657
2021-03-31 00:00:00
nvd
nvd
CVE-2021-28657
2021-03-31 08:15:11
redhatcve
redhatcve
CVE-2021-28657
2021-03-30 20:57:57
cve
cve
CVE-2021-28657
2021-03-31 08:15:11
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika
2021-06-25 00:36:32
nessus
nessus
Oracle Primavera Unifier (Oct 2021 CPU)
2021-10-20 00:00:00
Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2022 CPU)
2022-04-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00