PT-2018-13947 · Apache · Apache Tika

Publicado 2018-12-24 · Atualizado 2019-10-03 · CVE-2018-17197

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Tika versions 1.8 through 1.19.1

Description A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser.

Recommendations For Apache Tika versions 1.8 through 1.19.1, update to a version that contains a fix for this issue to prevent an infinite loop caused by a corrupt sqlite file.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2018-17197

GHSA-3448-VFVV-XP9G

SUSE-RU-2019:0341-1

SUSE-RU-2019:0863-1

SUSE-SU-2019:0341-1

SUSE-SU-2019:0863-1

Produtos afetados

Apache Tika

Referências · 84

• https://bugzilla.suse.com/1129765 · Nota
• https://bugzilla.suse.com/1121424 · Nota
• https://bugzilla.suse.com/1111686 · Nota
• https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3@%3Cdev.tika.apache.org%3E · Nota
• https://suse.com/security/cve/CVE-2018-10851 · Nota
• https://bugzilla.suse.com/1119807 · Nota
• https://bugzilla.suse.com/1122836 · Nota
• https://bugzilla.suse.com/1105720 · Nota
• https://bugzilla.suse.com/1119964 · Nota
• https://suse.com/support/update/announcement/-2019-341/suse-ru-20190341-1 · Nota
• http://securityfocus.com/bid/106293 · Nota
• https://bugzilla.suse.com/1121856 · Nota
• https://bugzilla.suse.com/1110427 · Nota
• https://bugzilla.suse.com/1111963 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-17197 · Nota de Segurança