Not rated
CVE-2019-10094 A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a…
Description
A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Tika | Versions not published |
References
- lists.apache.org lists.apache.org
- [tika-dev] 20190809 security fixes for CVE-2019-10088 and CVE-2019-1009{3,4} lists.apache.org
- [tika-dev] 20190812 Re: security fixes for CVE-2019-10088 and CVE-2019-1009{3,4} lists.apache.org
- [tika-dev] 20190813 Re: security fixes for CVE-2019-10088 and CVE-2019-1009{3,4} lists.apache.org
- www.oracle.com www.oracle.com
- [lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1 lists.apache.org
- www.oracle.com www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Apache Tika
The 4 CVEs of Apache Tika →
CVE-2020-1950
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23
Not rated
CVE-2019-10088
A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21
Not rated
CVE-2019-10093
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the…
Not rated