NetSight
IP …
medium5.5

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Impact

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Affected products

VendorProductAffected versions
ApacheTika
from 1.0 through 1.23
OracleBusiness Process Management Suite
Versions 12.2.1.3.0, 12.2.1.4.0
OracleCommunications Messaging Server
Versions 8.0.2, 8.1
OracleFlexcube Private Banking
Versions 12.0.0, 12.1.0
CanonicalUbuntu Linux
Version 16.04
DebianDebian Linux
Version 8.0

Weakness classification

CWE-835

References