Unrated
Apache Tika BPGParser Memory Usage DoS
CVE-2022-25169
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-25169 tika
- Ubuntu UBUNTU-CVE-2022-25169 tika
Original description The description as published by the source.
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web lists.apache.org
- web oracle.com
- web openwall.com