Unrated
Incomplete fix and new regex DoS in StandardsExtractingContentHandler
CVE-2022-33879
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-33879 tika
- Ubuntu UBUNTU-CVE-2022-33879 tika
Original description The description as published by the source.
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web lists.apache.org
- web openwall.com