Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-17197 EUVD-2018-0793GHSA-3448-vfvv-xp9g

Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser

Published Dec 24, 2018 · Updated Aug 5, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Tika Package: org.apache.tika:tika-parsers Package: tika Package: tika Ecosystem: Debian Ecosystem: Maven Ecosystem: Ubuntu

Description

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Tika Apache Tika 1.8-1.19.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 11 tika 1.20-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 tika No fix yet —
Ubuntu 26.04 LTS tika No fix yet —
Ubuntu 25.10 tika No fix yet —
Ubuntu 18.04 LTS tika No fix yet —
Ubuntu 16.04 LTS tika No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server 3.2 branch-network-formula 0.1.1545038754.c983fa6-3.6.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 netty 4.1.8.Final-2.7.4 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 py26-compat-salt 2016.11.10-6.18.14 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 python-susemanager-retail 1.0.1544459934.07229ad-2.9.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 saltboot-formula 0.1.1546527519.591e925-3.9.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 smdba 1.6.3-0.3.6.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacecmd 2.8.25.8-3.12.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-admin 2.8.4.3-3.3.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-backend 2.8.57.8-3.10.14 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-branding 2.8.5.13-3.13.14 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-client-tools 2.8.22.4-3.3.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-java 2.8.78.18-3.21.1 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-setup 2.8.7.6-3.13.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-utils 2.8.18.4-3.6.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 spacewalk-web 2.8.7.12-3.16.12 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 subscription-matcher 0.22-4.9.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 susemanager 3.2.15-3.16.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 susemanager-docs_en 3.2-11.15.12 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 susemanager-schema 3.2.16-3.16.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 susemanager-sls 3.2.20-3.18.1 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 susemanager-sync-data 3.2.12-3.14.2 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.2 tika-core 1.20-3.6.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Server 3.1 cobbler 2.6.6-5.25.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 py26-compat-salt 2016.11.10-1.19.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacecmd 2.7.8.15-2.32.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-branding 2.7.2.17-2.31.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-java 2.7.46.19-2.41.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-utils 2.7.10.11-2.23.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-web 2.7.1.21-2.35.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 subscription-matcher 0.22-4.9.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager 3.1.19-2.34.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-docs_en 3.1-10.29.4 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-frontend-libs 3.1.2-3.10.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-schema 3.1.21-2.36.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 tika-core 1.20-1.6.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Proxy 3.2 spacewalk-backend 2.8.57.8-3.10.14 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Proxy 3.2 spacewalk-client-tools 2.8.22.4-3.3.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Proxy 3.2 spacewalk-proxy-installer 2.8.6.4-3.6.13 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
SUSE Manager Proxy 3.2 spacewalk-web 2.8.7.12-3.16.12 SUSE-SU-2019:0341-1, SUSE-RU-2019:0341-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Proxy 3.1 spacewalk-web 2.7.1.21-2.35.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.tika:tika-parsers >= 1.8, < 1.20 1.20 GHSA-3448-vfvv-xp9g

Advisories 4

References