logo

Database

Inappropriate coding practices In org.apache.tika:tika-core

Description

Comparison errorr in org.apache.tika:tika-core In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-80172. NVD-2018-80173. OSV-2018-80174. OSV-DEBIAN-2018-80175. GHSA-j53j-gmr9-h8g36. GCVE-2018-80177. SECURITY-TRACKER-CVE-2018-8017

References

1. http://www.securityfocus.com/bid/1055132. https://github.com/apache/tika/commit/62926cae31a02d4f23d21148435804b96c543cc3. https://github.com/apache/tika/commit/8a6a9e1344f5b10ebfa1a189dc3c30d0da2b9d44. https://lists.apache.org/thread.html/72df7a3f0dda49a912143a1404b489837a11f374dfd1961061873a91@%3Cdev.tika.apache.org%3E

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.