Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

VectorLOCAL

PublishedSep 19, 2018, 14:29

Published Bysecurity@apache.org

Base Score

Score5.5

Package (Ecosystem)IntroducedFixedLimit

org.apache.tika:tika-core(Maven)1.21.19N/A

CWE-835

Base Score

5.5

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.0

Attack Vector (AV)

LOCAL