A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

The version of Oracle Business Process Management Suite installed on the remote host is affected by the following vulnerabilities as referenced in the October 2020 CPU advisory:  

  - Vulnerability in the Runtime Engine (Application Development Framework). An unauthenticated, remote     attacker with network access via HTTP can exploit this issue to compromise the Oracle Business Process     Management Suite. Successful attacks require human interaction from a person other than the attacker and     while the vulnerability is in Oracle Business Process Management Suite, attacks may significantly impact     additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or     delete access to some of Oracle Business Process Management Suite accessible data as well as unauthorized     read access to a subset of Oracle Business Process Management Suite accessible data. (CVE-2019-2904)

  - Vulnerability in the Runtime Engine (Apache Ant). An authenticated, local attacker can exploit this issue     to compromise the Oracle Business Process Management Suite. Successful attacks of this vulnerability can     result in unauthorized creation, deletion or modification access to critical data or all Oracle Business     Process Management Suite accessible data as well as unauthorized access to critical data or complete     access to all Oracle Business Process Management Suite accessible data. (CVE-2020-1945)

  - Vulnerability in the Runtime Engine (jQuery). An unauthenticated, remote attacker with network access via     HTTP can exploit this issue to compromise Oracle Business Process Management Suite. Successful attacks     require human interaction from a person other than the attacker and while the vulnerability is in Oracle     Business Process Management Suite, attacks may significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle     Business Process Management Suite accessible data as well as unauthorized read access to a subset of     Oracle Business Process Management Suite accessible data. (CVE-2019-11358)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4564-1 advisory.

    It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD     file. An attacker could use it to cause a denial of service (crash). (CVE-2020-1950, CVE-2020-1951)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Two security issues have been detected in tika and fixed.

CVE-2020-1950: carefully crafted or corrupt PSD file can cause excessive memory usage in Apache.

CVE-2020-1951: Infinite Loop (DoS) vulnerability in Apache Tika's PSDParser.

For Debian 8 'Jessie', these problems have been fixed in version 1.5-1+deb8u1.

We recommend that you upgrade your tika packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
142210	Oracle Business Process Management Suite (Oct 2020 CPU)	Nessus	Misc.	critical
141180	Ubuntu 16.04 LTS : Apache Tika vulnerabilities (USN-4564-1)	Nessus	Ubuntu Local Security Checks	medium
134982	Debian DLA-2161-1 : tika security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-1951

medium

Tenable Plugins

critical

medium

medium