Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-1950

Опубликовано: 18 мар. 2020
Источник: redhat
CVSS3: 5.5

Описание

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

A flaw was found in Apache Tika’s PSDParser, where a carefully crafted or corrupt PSD file can cause excessive memory usage. The highest threat from this vulnerability is to system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat BPM Suite 6tika-coreOut of support scope
Red Hat BPM Suite 6tika-parsersOut of support scope
Red Hat JBoss BRMS 5tika-coreOut of support scope
Red Hat JBoss BRMS 5tika-parsersOut of support scope
Red Hat JBoss BRMS 6tika-coreOut of support scope
Red Hat JBoss BRMS 6tika-parsersOut of support scope
Red Hat JBoss Data Virtualization 6tika-coreOut of support scope
Red Hat JBoss Data Virtualization 6tika-parsersOut of support scope
Red Hat JBoss Fuse Service Works 6tika-coreOut of support scope
Red Hat JBoss Fuse Service Works 6tika-parsersOut of support scope

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1822759tika: excessive memory usage in PSDParser

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 6 лет назад

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

CVSS3: 5.5
nvd
почти 6 лет назад

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

CVSS3: 5.5
debian
почти 6 лет назад

A carefully crafted or corrupt PSD file can cause excessive memory usa ...

CVSS3: 5.5
github
больше 4 лет назад

Uncontrolled Resource Consumption in Apache Tika

CVSS3: 5.5
fstec
почти 6 лет назад

Уязвимость парсера PSDParser среды обнаружения и анализа контента Apache Tika, позволяющая нарушителю вызвать отказ в обслуживании

5.5 Medium

CVSS3