CVE-2021-28657

Опубликовано: 31 мар. 2021

Источник: debian

EPSS Низкий

Описание

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

Пакеты

Пакет	Статус	Релиз	Тип
tika	unfixed		package
tika	no-dsa	bullseye	package
tika	no-dsa	buster	package

Примечания

https://www.openwall.com/lists/oss-security/2021/03/30/3

EPSS

Процентиль: 85%

0.02752

Низкий

Связанные уязвимости

CVE-2021-28657

CVSS3: 5.5

ubuntu

больше 5 лет назад

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

CVE-2021-28657

CVSS3: 5.5

redhat

больше 5 лет назад

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

CVE-2021-28657

CVSS3: 5.5

nvd

больше 5 лет назад

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

GHSA-567x-m4wm-87v8

CVSS3: 5.5

github

больше 5 лет назад

Infinite loop in Apache Tika

EPSS

Процентиль: 85%

0.02752

Низкий