ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 25 Π°ΠΏΡ. 2018
ΠΡΡΠΎΡΠ½ΠΈΠΊ: ubuntu
ΠΡΠΈΠΎΡΠΈΡΠ΅Ρ: medium
EPSS ΠΠΈΠ·ΠΊΠΈΠΉ
CVSS2: 4.3
CVSS3: 5.5
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.
| Π Π΅Π»ΠΈΠ· | Π‘ΡΠ°ΡΡΡ | ΠΡΠΈΠΌΠ΅ΡΠ°Π½ΠΈΠ΅ |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needs-triage |
| cosmic | ignored | end of life |
| devel | needs-triage | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | not-affected | 1.22-1 |
| esm-apps/jammy | not-affected | 1.22-2 |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
10
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 84%
0.02648
ΠΠΈΠ·ΠΊΠΈΠΉ
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
CVSS3: 6.5
redhat
Π±ΠΎΠ»ΡΡΠ΅ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.
CVSS3: 5.5
nvd
Π±ΠΎΠ»ΡΡΠ΅ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.
CVSS3: 5.5
debian
Π±ΠΎΠ»ΡΡΠ΅ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄
A carefully crafted (or fuzzed) file can trigger an infinite loop in A ...
CVSS3: 5.5
github
ΠΏΠΎΡΡΠΈ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄
org.apache.tika:tika-parsers has an Infinite Loop vulnerability
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 84%
0.02648
ΠΠΈΠ·ΠΊΠΈΠΉ
4.3 Medium
CVSS2
5.5 Medium
CVSS3