GitHub Advisoryadvisory · Maven
GHSA-5mf7-26mw-3rqr Moderate severity vulnerability that affects org.apache.tika:tika-core
MEDIUM
Official page ↗
- Aliases
- CVE-2018-1338
- Ecosystem
- Maven
- Packages
- org.apache.tika:tika-core
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-835
- Reviewed
- 2020-06-16
Affected packages
• Maven org.apache.tika:tika-core: < 1.18 → fixed in 1.18
Description
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.
Related
Alias · CVE (1)
- CVE-2018-1338 A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. vulnerability
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness