Apache Tika Regular Expression Denial of Service in Standards Extractor
Summary
Apache Tika Regular Expression Denial of Service in Standards Extractor
Original description
The description as published by the source.
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-30126 tika
- Ubuntu UBUNTU-CVE-2022-30126 tika
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web lists.apache.org
- web oracle.com
- web openwall.com
- web openwall.com
- web openwall.com