← Back

CVE-2020-1950

nvd nist
Published: Mar 23, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

Affected (9)

Products: Apache: Tika · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more
Show all products
Apache: Tika · Canonical: Ubuntu Linux · Debian: Debian Linux · Oracle: Business Process Management Suite, Communications Messaging Server, Flexcube Private Banking
Apache
1 product
Tika
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Oracle
3 products
Business Process Management Suite
Communications Messaging Server
Flexcube Private Banking
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tika
From 1.0 to 1.23
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 16.04
Debian Linux
Version 8.0
Oracle
Business Process Management Suite
Version 12.2.1.3.0
Business Process Management Suite
Version 12.2.1.4.0
Oracle
Communications Messaging Server
Version 8.0.2
Communications Messaging Server
Version 8.1
Oracle
Flexcube Private Banking
Version 12.0.0
Flexcube Private Banking
Version 12.1.0

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (10)

Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.