{"schemaVersion":3,"id":"CVE-2018-17197","aliases":["SUSE-RU-2019:0341-1","SUSE-SU-2019:0341-1","UBUNTU-CVE-2018-17197","DEBIAN-CVE-2018-17197","GHSA-3448-vfvv-xp9g"],"status":"published","duplicateOf":null,"title":null,"description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","dates":{"published":"2018-12-24T14:00:00.000Z","modified":"2024-08-05T10:39:59.588Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Maven","score":6.5,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true}]},"epss":{"probability":0.06146,"percentile":0.93382,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.21200000000000038,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.05934},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06215,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06146,"percentile":0.93382}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06215,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05934,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06146,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06146,"percentile":0.93382}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"}],"affected":[{"vendor":"apache software foundation","product":"apache tika","name":"Apache Tika","label":"apache tika","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Apache Tika 1.8-1.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"Apache Tika 1.8-1.19.1","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_tika"},{"vendor":"apache","product":"tika","name":"tika","label":"tika","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.8, ≤ 1.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.8, ≤ 1.19.1","eol":null,"hubHref":"/vendor/apache/tika"},{"vendor":"debian","product":"tika","name":"tika","label":"tika","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/tika","purlType":"deb","versions":[{"text":"< 1.20-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"tika","name":"tika","label":"tika","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/tika","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.tika","product":"tika-parsers","name":"org.apache.tika:tika-parsers","label":"tika-parsers","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.tika/tika-parsers","purlType":"maven","versions":[{"text":"≥ 1.8, < 1.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.8, < 1.20","eol":null,"hubHref":null},{"vendor":"suse","product":"branch-network-formula&distro=SUSE Manager Server 3.2","name":"branch-network-formula","label":"branch-network-formula&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/branch-network-formula&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.1.1545038754.c983fa6-3.6.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1545038754.c983fa6-3.6.13","eol":null,"hubHref":null},{"vendor":"suse","product":"netty&distro=SUSE Manager Server 3.2","name":"netty","label":"netty&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/netty&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 4.1.8.Final-2.7.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.8.Final-2.7.4","eol":null,"hubHref":null},{"vendor":"suse","product":"py26-compat-salt&distro=SUSE Manager Server 3.2","name":"py26-compat-salt","label":"py26-compat-salt&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py26-compat-salt&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2016.11.10-6.18.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.10-6.18.14","eol":null,"hubHref":null},{"vendor":"suse","product":"python-susemanager-retail&distro=SUSE Manager Server 3.2","name":"python-susemanager-retail","label":"python-susemanager-retail&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-susemanager-retail&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.0.1544459934.07229ad-2.9.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1544459934.07229ad-2.9.13","eol":null,"hubHref":null},{"vendor":"suse","product":"saltboot-formula&distro=SUSE Manager Server 3.2","name":"saltboot-formula","label":"saltboot-formula&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltboot-formula&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.1.1546527519.591e925-3.9.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1546527519.591e925-3.9.13","eol":null,"hubHref":null},{"vendor":"suse","product":"smdba&distro=SUSE Manager Server 3.2","name":"smdba","label":"smdba&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/smdba&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.6.3-0.3.6.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.3-0.3.6.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server 3.2","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.25.8-3.12.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.25.8-3.12.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-admin&distro=SUSE Manager Server 3.2","name":"spacewalk-admin","label":"spacewalk-admin&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-admin&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.4.3-3.3.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.4.3-3.3.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Proxy 3.2","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Proxy 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Proxy 3.2","purlType":"rpm","versions":[{"text":"< 2.8.57.8-3.10.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.57.8-3.10.14","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Server 3.2","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.57.8-3.10.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.57.8-3.10.14","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-branding&distro=SUSE Manager Server 3.2","name":"spacewalk-branding","label":"spacewalk-branding&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-branding&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.5.13-3.13.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.5.13-3.13.14","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Proxy 3.2","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Proxy 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Proxy 3.2","purlType":"rpm","versions":[{"text":"< 2.8.22.4-3.3.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.22.4-3.3.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Server 3.2","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.22.4-3.3.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.22.4-3.3.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server 3.2","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.78.18-3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.78.18-3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-proxy-installer&distro=SUSE Manager Proxy 3.2","name":"spacewalk-proxy-installer","label":"spacewalk-proxy-installer&distro=SUSE Manager Proxy 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-proxy-installer&distro=SUSE Manager Proxy 3.2","purlType":"rpm","versions":[{"text":"< 2.8.6.4-3.6.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.6.4-3.6.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-setup&distro=SUSE Manager Server 3.2","name":"spacewalk-setup","label":"spacewalk-setup&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-setup&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.6-3.13.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.6-3.13.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-utils&distro=SUSE Manager Server 3.2","name":"spacewalk-utils","label":"spacewalk-utils&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-utils&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.18.4-3.6.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.18.4-3.6.13","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Proxy 3.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Proxy 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Proxy 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.12-3.16.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.12-3.16.12","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server 3.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.12-3.16.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.12-3.16.12","eol":null,"hubHref":null},{"vendor":"suse","product":"subscription-matcher&distro=SUSE Manager Server 3.2","name":"subscription-matcher","label":"subscription-matcher&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/subscription-matcher&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.22-4.9.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22-4.9.13","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server 3.2","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2-11.15.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-11.15.12","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server 3.2","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.16-3.16.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.16-3.16.13","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server 3.2","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.20-3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.20-3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sync-data&distro=SUSE Manager Server 3.2","name":"susemanager-sync-data","label":"susemanager-sync-data&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sync-data&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.12-3.14.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.12-3.14.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server 3.2","name":"susemanager","label":"susemanager&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.15-3.16.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.15-3.16.13","eol":null,"hubHref":null},{"vendor":"suse","product":"tika-core&distro=SUSE Manager Server 3.2","name":"tika-core","label":"tika-core&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tika-core&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.20-3.6.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20-3.6.13","eol":null,"hubHref":null}],"affectedCount":31,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/106293","label":"www.securityfocus.com/bid/106293","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3%40%3Cdev.tika.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["X Refsource MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","label":"www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"www.oracle.com/security-alerts/cpuapr2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB"]},{"url":"https://www.suse.com/support/update/announcement/-2019-341/suse-ru-20190341-1/","label":"www.suse.com/support/update/announcement/-2019-341/suse-ru-20190341-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1089121","label":"bugzilla.suse.com/1089121","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1098826","label":"bugzilla.suse.com/1098826","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1099988","label":"bugzilla.suse.com/1099988","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1104680","label":"bugzilla.suse.com/1104680","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1105720","label":"bugzilla.suse.com/1105720","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1105791","label":"bugzilla.suse.com/1105791","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110427","label":"bugzilla.suse.com/1110427","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110757","label":"bugzilla.suse.com/1110757","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110772","label":"bugzilla.suse.com/1110772","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111191","label":"bugzilla.suse.com/1111191","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111686","label":"bugzilla.suse.com/1111686","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111910","label":"bugzilla.suse.com/1111910","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111963","label":"bugzilla.suse.com/1111963","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112121","label":"bugzilla.suse.com/1112121","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114029","label":"bugzilla.suse.com/1114029","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114059","label":"bugzilla.suse.com/1114059","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114115","label":"bugzilla.suse.com/1114115","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114268","label":"bugzilla.suse.com/1114268","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114877","label":"bugzilla.suse.com/1114877","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115029","label":"bugzilla.suse.com/1115029","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115978","label":"bugzilla.suse.com/1115978","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116365","label":"bugzilla.suse.com/1116365","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116566","label":"bugzilla.suse.com/1116566","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116610","label":"bugzilla.suse.com/1116610","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116826","label":"bugzilla.suse.com/1116826","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117759","label":"bugzilla.suse.com/1117759","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118112","label":"bugzilla.suse.com/1118112","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118478","label":"bugzilla.suse.com/1118478","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118917","label":"bugzilla.suse.com/1118917","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1119233","label":"bugzilla.suse.com/1119233","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1119271","label":"bugzilla.suse.com/1119271","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1119320","label":"bugzilla.suse.com/1119320","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1119727","label":"bugzilla.suse.com/1119727","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1119807","label":"bugzilla.suse.com/1119807","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1121038","label":"bugzilla.suse.com/1121038","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1121424","label":"bugzilla.suse.com/1121424","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1122565","label":"bugzilla.suse.com/1122565","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1123902","label":"bugzilla.suse.com/1123902","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1123983","label":"bugzilla.suse.com/1123983","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1124794","label":"bugzilla.suse.com/1124794","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1125097","label":"bugzilla.suse.com/1125097","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/987798","label":"bugzilla.suse.com/987798","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17197","label":"www.suse.com/security/cve/CVE-2018-17197","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190341-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20190341-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-17197","label":"ubuntu.com/security/CVE-2018-17197","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2018/12/22/2","label":"www.openwall.com/lists/oss-security/2018/12/22/2","hostname":"www.openwall.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17197","label":"www.cve.org/CVERecord?id=CVE-2018-17197","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-17197","label":"security-tracker.debian.org/tracker/CVE-2018-17197","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17197","label":"nvd.nist.gov/vuln/detail/CVE-2018-17197","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-3448-vfvv-xp9g","label":"github.com/advisories/GHSA-3448-vfvv-xp9g","hostname":"github.com","tags":["Advisory"]},{"url":"https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3@%3Cdev.tika.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["SUSE-RU-2019:0863-1","SUSE-SU-2019:0863-1"],"duplicates":[],"related":["SUSE-RU-2019:0863-1","SUSE-SU-2019:0863-1"]},"timeline":[{"kind":"published","date":"2018-12-24T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T10:39:59.588Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:55:16.437Z","stale":false,"partial":false}}