CVE-2021-28657
31.03.2021, 08:15
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
| Vendor | Product | Version |
|---|---|---|
| apache | tika | 𝑥 ≤ 1.25 |
| oracle | healthcare_foundation | 7.3.0 |
| oracle | healthcare_foundation | 8.0.0 |
| oracle | healthcare_foundation | 8.1.0 |
| oracle | primavera_unifier | 17.7 ≤ 𝑥 ≤ 17.12 |
| oracle | primavera_unifier | 18.8 |
| oracle | primavera_unifier | 19.12 |
| oracle | primavera_unifier | 20.12 |
| oracle | webcenter_portal | 12.2.1.3.0 |
| oracle | webcenter_portal | 12.2.1.4.0 |
| oracle | communications_messaging_server | 8.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References