Lucene search
Veracode Vulnerability DatabaseVERACODE:35567HistoryMay 17, 2022 - 7:13 a.m.
Denial Of Service (DoS)
2022-05-1707:13:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
denial of service
apache tika
regular expression
standardsextractingcontenthandler
EPSS
0.001
Percentile
39.4%
Apache Tika core is vulnerable to service attacks. A malicious user is able to cause denial of service conditions due to a regular expression in our StandardsText class by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler.
References
www.openwall.com/lists/oss-security/2022/05/16/3
www.openwall.com/lists/oss-security/2022/05/31/2
www.openwall.com/lists/oss-security/2022/06/27/5
lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4
security.netapp.com/advisory/ntap-20220624-0004/
www.openwall.com/lists/oss-security/2022/05/16/3
www.oracle.com/security-alerts/cpujul2022.html
Related
debiancve
debiancve
cnvd
cnvd
Apache Tika Denial of Service Vulnerability (CNVD-2022-73491)
2022-05-27 00:00:00
ubuntucve
ubuntucve
osv
osv
Regular expression denial of service in apache tika
2022-05-17 00:00:37
CVE-2022-30126
2022-05-16 17:15:09
CVE-2022-30973
2022-05-31 14:15:07
cve
cve
redhatcve
redhatcve
CVE-2022-30126
2022-06-06 22:57:18
CVE-2022-30973
2022-06-21 09:01:21
cvelist
cvelist
CVE-2022-30126 Apache Tika Regular Expression Denial of Service in Standards Extractor
2022-05-16 17:05:13
CVE-2022-30973 Missing fix for CVE-2022-30126 in 1.28.2
2022-05-31 13:20:10
github
github
Regular expression denial of service in apache tika
2022-05-17 00:00:37
Regular expression denial of service in apache tika
2022-06-01 00:00:36
Apache Tika contains incomplete fix for regex DoS
2022-06-28 00:00:41
prion
prion
Code injection
2022-05-16 17:15:00
Design/Logic Flaw
2022-05-31 14:15:00
Design/Logic Flaw
2022-06-27 22:15:00
nvd
nvd
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-06-01 10:24:13
Regular Expression Denial Of Service (ReDoS)
2022-06-28 08:35:27
openvas
openvas
Apache Tika Server < 1.28.2, 2.x < 2.4.0 Multiple Vulnerabilities
2022-05-17 00:00:00
Apache Tika Server < 1.28.4, 2.4.x < 2.4.1 DoS Vulnerability
2022-06-29 00:00:00
redhat
redhat
(RHSA-2022:7257) Low: Red Hat Integration Camel-K 1.8.1 security update
2022-10-27 18:11:20
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35
nessus
nessus
Oracle Primavera Unifier (Jul 2022 CPU)
2022-07-20 00:00:00
Oracle WebCenter Portal Multiple Vulnerabilities (Oct 2022 CPU)
2022-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00