CVE-2019-10093
- State
- Published
- Severity
- Not scored
- Published
- Aug 2, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 26, 2019
Description
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache TikaApache |
|
References
- https://lists.apache.org/thread.html/a5a44eff1b9eda3bc69d22943a1030c43d376380c75d3ab04d0c1a21%40%3Cdev.tika.apache.org%3E
- [tika-dev] 20190809 security fixes for CVE-2019-10088 and CVE-2019-1009{3,4}mailing-list
- [tika-dev] 20190812 Re: security fixes for CVE-2019-10088 and CVE-2019-1009{3,4}mailing-list
- [tika-dev] 20190813 Re: security fixes for CVE-2019-10088 and CVE-2019-1009{3,4}mailing-list
- https://security.netapp.com/advisory/ntap-20190828-0004/
- https://www.oracle.com/security-alerts/cpujan2020.html
- [lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1mailing-list
- https://www.oracle.com/security-alerts/cpuapr2020.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.