Published: 27/06/2022 Updated: 28/10/2022

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P

The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache tika

Debian Bug report logs - #1015002 tika: CVE-2022-25169 CVE-2022-30126 CVE-2022-33879 Package: src:tika; Maintainer for src:tika is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 15 Jul 2022 22:39:01 UTC Severity: important Tags: secu ...

NVD-CWE-Other https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh http://www.openwall.com/lists/oss-security/2022/06/27/5 https://security.netapp.com/advisory/ntap-20220812-0004/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015002 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-33879

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect