← Back

CVE-2020-1951

nvd nist
Published: Mar 23, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Affected (9)

Products: Apache: Tika · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more
Show all products
Apache: Tika · Canonical: Ubuntu Linux · Debian: Debian Linux · Oracle: Business Process Management Suite, Communications Messaging Server, Flexcube Private Banking
Apache
1 product
Tika
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Oracle
3 products
Business Process Management Suite
Communications Messaging Server
Flexcube Private Banking
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tika
From 1.0 to 1.23
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 16.04
Debian Linux
Version 8.0
Oracle
Business Process Management Suite
Version 12.2.1.3.0
Business Process Management Suite
Version 12.2.1.4.0
Oracle
Communications Messaging Server
Version 8.0.2
Communications Messaging Server
Version 8.1
Oracle
Flexcube Private Banking
Version 12.0.0
Flexcube Private Banking
Version 12.1.0

Related CWEs

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (10)

Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.