CVE-2020-1951
Fixed in a distro release EPSS 3%
A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.
Products: apache tika, oracle business_process_management_suite, oracle communications_messaging_server, oracle flexcube_private_banking, canonical ubuntu_linux, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.tika:tika | 1.24 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | tika | 1.22-2 |
| Debian 8 | tika | 1.5-1+deb8u1 |
| Ubuntu 16.04 LTS | tika | 1.5-4ubuntu0.1 |
| Ubuntu 18.04 LTS | tika | no fix |
| Ubuntu Pro 20.04 LTS | tika | 1.22-1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | tika | 1.22-2ubuntu0.22.04.1~esm1 |