Vulnerabilities > CVE-2018-1338 - Infinite Loop vulnerability in Apache Tika

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2018-04-25

Updated: 2024-11-21

Summary

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

Part	Description	Count
Application	Apache Apache Tika 0.1 Apache Tika 0.2 Apache Tika 0.3 Apache Tika 0.4 Apache Tika 0.5 Apache Tika 0.6 Apache Tika 0.7 Apache Tika 0.8 Apache Tika 0.9 Apache Tika 0.10 Apache Tika 1.0 Apache Tika 1.1 Apache Tika 1.2 Apache Tika 1.3 Apache Tika 1.4 Apache Tika 1.5 Apache Tika 1.6 Apache Tika 1.7 Apache Tika 1.8 Apache Tika 1.9 Apache Tika 1.10 Apache Tika 1.11 Apache Tika 1.12 Apache Tika 1.13 Apache Tika 1.14 Apache Tika 1.15 Apache Tika 1.16 Apache Tika 1.17	28

advisories

rhsa

id	RHSA-2018:2669