CVE-2019-10093

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-10093
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10093.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-10093
Aliases
Downstream
Related
Published
2019-08-02T19:15:11.780Z
Modified
2026-04-10T04:13:39.268908Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.

References

Affected packages

Git / github.com/apache/tika

Affected ranges

Type
GIT
Repo
https://github.com/apache/tika
Events
Introduced
199112bde63e64af3de7ec8c98475907e7513128
Last affected
7d4dd43eb40a500663b2bdd38f0a9ccb0569c1d7
Database specific 
{
    "versions": [
        {
            "introduced": "1.19"
        },
        {
            "last_affected": "1.21"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10093.json"