PT-2022-20015 · Apache+4 · Apache Tika+4

Published 2022-05-16 · Updated 2025-05-23 · CVE-2022-30126

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Tika versions prior to 1.28.3 Apache Tika versions prior to 2.4.0

Description A regular expression in the StandardsText class, used by the StandardsExtractingContentHandler, could lead to a denial of service caused by backtracking on a specially crafted file. This issue only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler.

Recommendations For Apache Tika versions prior to 1.28.3, update to version 1.28.3 or later. For Apache Tika versions prior to 2.4.0, update to version 2.4.0 or later.

Fix

DoS

Weakness Enumeration

CWE-1333

Related Identifiers

CVE-2022-30126

GHSA-RPJM-422R-95MH

SUSE-SU-2022:3310-1

SUSE-SU-2022:3311-1

USN-7529-1

Affected Products

Apache Tika

Debian

Linuxmint

Suse

Ubuntu

References · 46

• https://osv.dev/vulnerability/SUSE-SU-2022:3311-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30126 · Security Note
• https://ubuntu.com/security/CVE-2020-1950 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-30126 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7529-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33879 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30126 · Vendor Advisory
• https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3310-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-30126 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7529-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-30126 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-30126 · Security Note
• https://ubuntu.com/security/CVE-2022-30973 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rpjm-422r-95mh · Vendor Advisory