CVE-2019-10093

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.

References

Affected packages

Git / github.com/apache/tika

Affected ranges

Type

GIT

Repo

https://github.com/apache/tika

Events

Introduced

199112bde63e64af3de7ec8c98475907e7513128

Last affected

7d4dd43eb40a500663b2bdd38f0a9ccb0569c1d7

Database specific

{
    "cpe": "cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "1.19"
        },
        {
            "last_affected": "1.21"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10093.json"