Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-1951
A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.004
EPSS Ranking
60.4%
CVSS Severity
CVSS v3 Score
5.5
CVSS v2 Score
4.3
References
https://lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf77031323172%40%3Cdev.tika.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
https://usn.ubuntu.com/4564-1/
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf77031323172%40%3Cdev.tika.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
https://usn.ubuntu.com/4564-1/
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
Products affected by CVE-2020-1951
Apache
»
Tika
»
Version:
1.0
cpe:2.3:a:apache:tika:1.0
Apache
»
Tika
»
Version:
1.1
cpe:2.3:a:apache:tika:1.1
Apache
»
Tika
»
Version:
1.10
cpe:2.3:a:apache:tika:1.10
Apache
»
Tika
»
Version:
1.11
cpe:2.3:a:apache:tika:1.11
Apache
»
Tika
»
Version:
1.12
cpe:2.3:a:apache:tika:1.12
Apache
»
Tika
»
Version:
1.13
cpe:2.3:a:apache:tika:1.13
Apache
»
Tika
»
Version:
1.14
cpe:2.3:a:apache:tika:1.14
Apache
»
Tika
»
Version:
1.15
cpe:2.3:a:apache:tika:1.15
Apache
»
Tika
»
Version:
1.16
cpe:2.3:a:apache:tika:1.16
Apache
»
Tika
»
Version:
1.17
cpe:2.3:a:apache:tika:1.17
Apache
»
Tika
»
Version:
1.18
cpe:2.3:a:apache:tika:1.18
Apache
»
Tika
»
Version:
1.19
cpe:2.3:a:apache:tika:1.19
Apache
»
Tika
»
Version:
1.19.1
cpe:2.3:a:apache:tika:1.19.1
Apache
»
Tika
»
Version:
1.2
cpe:2.3:a:apache:tika:1.2
Apache
»
Tika
»
Version:
1.20
cpe:2.3:a:apache:tika:1.20
Apache
»
Tika
»
Version:
1.21
cpe:2.3:a:apache:tika:1.21
Apache
»
Tika
»
Version:
1.22
cpe:2.3:a:apache:tika:1.22
Apache
»
Tika
»
Version:
1.23
cpe:2.3:a:apache:tika:1.23
Apache
»
Tika
»
Version:
1.3
cpe:2.3:a:apache:tika:1.3
Apache
»
Tika
»
Version:
1.4
cpe:2.3:a:apache:tika:1.4
Apache
»
Tika
»
Version:
1.5
cpe:2.3:a:apache:tika:1.5
Apache
»
Tika
»
Version:
1.6
cpe:2.3:a:apache:tika:1.6
Apache
»
Tika
»
Version:
1.7
cpe:2.3:a:apache:tika:1.7
Apache
»
Tika
»
Version:
1.8
cpe:2.3:a:apache:tika:1.8
Apache
»
Tika
»
Version:
1.9
cpe:2.3:a:apache:tika:1.9
Oracle
»
Business Process Management Suite
»
Version:
12.2.1.3.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0
Oracle
»
Business Process Management Suite
»
Version:
12.2.1.4.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0
Oracle
»
Communications Messaging Server
»
Version:
8.0.2
cpe:2.3:a:oracle:communications_messaging_server:8.0.2
Oracle
»
Communications Messaging Server
»
Version:
8.1
cpe:2.3:a:oracle:communications_messaging_server:8.1
Oracle
»
Flexcube Private Banking
»
Version:
12.0.0
cpe:2.3:a:oracle:flexcube_private_banking:12.0.0
Oracle
»
Flexcube Private Banking
»
Version:
12.1.0
cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Canonical
»
Ubuntu Linux
»
Version:
16.04
cpe:2.3:o:canonical:ubuntu_linux:16.04
Debian
»
Debian Linux
»
Version:
8.0
cpe:2.3:o:debian:debian_linux:8.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved