CVE-2018-1338 in Tika

요약

\~에 의해 MITRE

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2017. 12. 07.
• 공개: 2018. 04. 25.
• 모더레이션: 수락
• 항목: VDB-117116
• CPE: 준비됨
• CWE: CWE-399 (확인됨)
• CVSS: 5.5 (NVD)
• EPSS: 0.03002
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-1338
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-1338
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-1338/