Lucene search
Veracode Vulnerability DatabaseVERACODE:6195HistoryApr 26, 2018 - 4:39 a.m.
Denial Of Service (DoS) Via Infinite Loop
2018-04-2604:39:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
19.1%
Apache Tika parsers are susceptible to denial of service (DoS). The attacker can trigger an infinite loop in the BPG parser by passing a malicious file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache tika parser modules | le | 1.6 | |
| apache tika parser modules | le | 1.17 |
Related
ubuntucve
ubuntucve
CVE-2018-1338
2018-04-25 00:00:00
osv
osv
Moderate severity vulnerability that affects org.apache.tika:tika-core
2018-10-17 15:50:45
CVE-2018-1338
2018-04-25 21:29:00
prion
prion
Code injection
2018-04-25 21:29:00
redhatcve
redhatcve
CVE-2018-1338
2018-04-27 01:58:58
cve
cve
CVE-2018-1338
2018-04-25 21:29:00
nvd
nvd
CVE-2018-1338
2018-04-25 21:29:00
github
github
Moderate severity vulnerability that affects org.apache.tika:tika-core
2018-10-17 15:50:45
debiancve
debiancve
CVE-2018-1338
2018-04-25 21:29:00
cvelist
cvelist
CVE-2018-1338
2018-04-25 00:00:00
ibm
ibm
openvas
openvas
Apache Tika Server 1.17 Multiple Vulnerabilities
2018-04-26 00:00:00
f5
f5
redhat
redhat
(RHSA-2018:2669) Important: Fuse 7.1 security update
2018-09-11 07:52:48