CVE-2023-34150: Apache Any23: Possible excessive allocation of resources reading input.
Published Jul 5, 2023
·Updated
UNSUPPORTED WHEN ASSIGNED Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.
Affected Software
2 affected components
Apache Any23<=2.7
maven/org.apache.any23:apache-any23<=2.7
Event History
Jul 5, 2023
CVE Published
via MITRE·07:28 AM
Data Sourced
via MITRE·07:28 AM
DescriptionSeverityWeakness
Unsupported
08:15 AM
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-34150?
The severity of CVE-2023-34150 is classified as having the potential for excessive memory usage.
2
How do I fix CVE-2023-34150?
To mitigate CVE-2023-34150, consider upgrading to a newer version of Apache Any23 that addresses the issue.
3
What is affected by CVE-2023-34150?
CVE-2023-34150 affects Apache Any23 versions up to and including 2.7.
4
What does CVE-2023-34150 exploit?
CVE-2023-34150 exploits the TikaEncodingDetector component in Apache Any23.
5
Who is responsible for addressing CVE-2023-34150?
The Apache Software Foundation is responsible for addressing CVE-2023-34150 through software updates and patches.