[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 2 Aug 2019 07:33:38 -0400
From: Tim Allison <tallison@...che.org>
To: announce@...che.org, dev@...a.apache.org, user@...a.apache.org,
Apache Security Team <security@...che.org>, oss-security@...ts.openwall.com
Subject: [CVE-2019-10088] OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper
Title: [CVE-2019-10088] OOM from a crafted Zip File in Apache Tika's
RecursiveParserWrapper
Severity: Medium
Vendor: The Apache Software Foundation
Versions Affected: Apache Tika 1.7 to 1.21
Description:
A carefully crafted or corrupt zip file can cause an OOM in Apache
Tika's RecursiveParserWrapper in versions 1.7-1.21.
Mitigation:
Apache Tika users should upgrade to 1.22 or later.
Credit:
This issue was discovered by RunningSnail.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
