GitHub Advisoryadvisory · Maven

GHSA-3448-vfvv-xp9g Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser

MEDIUM Published 2018-12-26 Modified 2023-09-27 Official page ↗
Aliases
CVE-2018-17197
Ecosystem
Maven
Packages
org.apache.tika:tika-parsers
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2020-06-16

Affected packages

• Maven org.apache.tika:tika-parsers: >= 1.8, < 1.20 → fixed in 1.20

Description

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.

Related

Alias · CVE (1)

  • CVE-2018-17197 A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References