CVE-2018-1339: Medium severity Apache Tika vulnerability
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.
Other sources
Apache Tika before version 1.18 has an infinite loop vulnerability in the ChmParser. A remote attacker could exploit this to cause a denial of service via crafted file.
External References:
https://lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828@%3Cdev.tika.apache.org%3E
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1339?
The severity of CVE-2018-1339 is medium with a severity value of 5.5.
Which versions of Apache Tika are affected by CVE-2018-1339?
Versions of Apache Tika before 1.18 are affected by CVE-2018-1339.
How can a carefully crafted file trigger an infinite loop in Apache Tika's ChmParser?
A carefully crafted file can trigger an infinite loop by exploiting a vulnerability in Apache Tika's ChmParser component.
Is there a remedy available for CVE-2018-1339?
Yes, updating Apache Tika to version 1.18 or later will remedy the vulnerability.
Are there any references for CVE-2018-1339?
Yes, you can find references for CVE-2018-1339 at the following links: [link1], [link2], [link3].