CVE-2019-10093: Medium severity apache tika vulnerability
Published Aug 2, 2019
·Updated
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.
Affected Software
1 affected component
Apache Tika>=1.19<=1.21
Remediation
Event History
Aug 2, 2019
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-10093?
CVE-2019-10093 is a vulnerability in Apache Tika 1.19 to 1.21 that allows a carefully crafted 2003ml or 2006ml file to consume all available SAXParsers in the pool, leading to long hangs.
2
How severe is CVE-2019-10093?
CVE-2019-10093 has a severity rating of 6.5 (medium).
3
How can I fix CVE-2019-10093?
To fix CVE-2019-10093, Apache Tika users should upgrade to version 1.22 or later.
4
What software is affected by CVE-2019-10093?
Apache Tika versions 1.19 to 1.21 are affected by CVE-2019-10093.
5
What is the Common Weakness Enumeration (CWE) number for CVE-2019-10093?
The Common Weakness Enumeration (CWE) number for CVE-2019-10093 is 770.