The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2022/05/16/4 | Mailing List Third Party Advisory |
https://lists.apache.org/thread/t3tb51sf0k2pmbnzsrrrm23z9r1c10rk | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20220804-0004/ | Third Party Advisory |
https://www.oracle.com/security-alerts/cpujul2022.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2022-05-16 17:15
Updated : 2024-02-28 19:09
NVD link : CVE-2022-25169
Mitre link : CVE-2022-25169
CVE.ORG link : CVE-2022-25169
JSON object : View
Products Affected
oracle
- primavera_unifier
apache
- tika
CWE
CWE-770
Allocation of Resources Without Limits or Throttling