CVE-2021-28657
Assigner: apache
Published: 2021-03-31T07:35:14
State: PUBLISHED
affected: product: Apache Tika
vendor: Apache Software Foundation
versions: lessThan: 1.26
status: affected
version: Apache Tika
versionType: custom
credits: value: Apache Tika would like to thank Khaled Nassar for reporting this issue.
descriptions: value: A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
problemTypes: descriptions: cweId: CWE-835
description: CWE-835 Infinite Loop
type: CWE
source: discovery: UNKNOWN
title: Infinite loop in Apache Tika's MP3 parser
workarounds: value: Users should upgrade to 1.26 or later.
x_generator: engine: Vulnogram 0.0.9