Apache Tika Regular Expression Denial of Service in Standards Extractor
Résumé
Apache Tika Regular Expression Denial of Service in Standards Extractor
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-30126 tika
- Ubuntu UBUNTU-CVE-2022-30126 tika
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web lists.apache.org
- web oracle.com
- web openwall.com
- web openwall.com
- web openwall.com