Описание
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| tika | fixed | 1.22-2 | package | |
| tika | no-dsa | buster | package |
Примечания
https://www.openwall.com/lists/oss-security/2020/03/18/3
https://github.com/apache/tika/commit/ab8a9ed830ec710a32e4ffdf4989aea3aaea92ef
EPSS
Связанные уязвимости
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
Uncontrolled Resource Consumption in Apache Tika
Уязвимость парсера PSDParser среды обнаружения и анализа контента Apache Tika, позволяющая нарушителю вызвать отказ в обслуживании
EPSS