CVE-2020-1951 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Published: Mar 23, 2020
Updated: May 9, 2024
CVE: CVE-2020-1951
GHSA: GHSA-3264-3fm9-fg44
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

CWE-835

Affected Software
References

Software	From	Fixed in
apache / tika	1.0	1.23.x
oracle / flexcube_private_banking	12.1.0	12.1.0.x
oracle / flexcube_private_banking	12.0.0	12.0.0.x
debian / debian_linux	8.0	8.0.x
oracle / business_process_management_suite	12.2.1.3.0	12.2.1.3.0.x
canonical / ubuntu_linux	16.04	16.04.x
oracle / business_process_management_suite	12.2.1.4.0	12.2.1.4.0.x
oracle / communications_messaging_server	8.1	8.1.x
oracle / communications_messaging_server	8.0.2	8.0.2.x
org.apache.tika / tika	1.0	1.24