https://bugzilla.redhat.com/show_bug.cgi?id=1778683
Bug ID: 1778683
Summary: CVE-2019-10093 tika: arefully crafted 2003ml or 2006ml
file could consume all available SAXParsers in the
pool and lead to DoS
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Target Milestone: ---
Classification: Other
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could
consume all available SAXParsers in the pool and lead to very long hangs.
Apache Tika users should upgrade to 1.22 or later.
External References:
https://lists.apache.org/thread.html/a5a44eff1b9eda3bc69d22943a1030c43d37...
--
You are receiving this mail because:
You are on the CC list for the bug.