1. CVE-Search
  2. CVE-2018-17197
ID CVE-2018-17197
Summary A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:tika:1.8:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.9:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.10:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.11:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.12:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.13:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.14:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.15:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.16:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.17:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.18:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.18:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.19:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tika:1.19.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tika:1.19.1:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:
CWE CWE-835
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
bid 106293
misc
mlist [lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1
Last major update 03-10-2019 - 00:03
Published 24-12-2018 - 14:29
Last modified 03-10-2019 - 00:03
Back to Top