UBUNTU-CVE-2022-26336

See a problem?
Source
https://ubuntu.com/security/notices/UBUNTU-CVE-2022-26336
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26336.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-26336
Related
Published
2022-03-04T16:15:00Z
Modified
2024-10-15T14:09:50Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommended to upgrade to poi-scratchpad 5.2.1.

References

Affected packages

Ubuntu:Pro:14.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=trusty/esm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-1
3.6.2+dfsg-2
3.6.2+dfsg-2ubuntu0.1~esm1
3.6.2+dfsg-2ubuntu0.1~esm2

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.10.1-2

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-7
3.6.2+dfsg-8
3.6.2+dfsg-8ubuntu0.1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.10.1-3

4.*

4.0.1-1~18.03

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-10
3.6.2+dfsg-11
3.6.2+dfsg-18~18.04

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.1-1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-20
3.6.2+dfsg-22

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.1-1
4.0.1-2
4.0.1-3

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-24

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:24.10 / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.1-6

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:24.10 / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-26

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:24.04:LTS / libapache-poi-java

Package

Name
libapache-poi-java
Purl
pkg:deb/ubuntu/libapache-poi-java?arch=src?distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.1-4
4.0.1-5
4.0.1-6

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:24.04:LTS / lucene-solr

Package

Name
lucene-solr
Purl
pkg:deb/ubuntu/lucene-solr?arch=src?distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.2+dfsg-26

Ecosystem specific 

{
    "ubuntu_priority": "low"
}