In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Apache Tika, a regular expression in our StandardsText class, used by the     StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially     crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a     non-standard handler. This is fixed in 1.28.2 and 2.4.0 (CVE-2022-30126)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7529-1 advisory.

    It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD     file. An attacker could possibly use this issue to cause a denial of service. This issue only affected     Ubuntu 20.04 LTS. (CVE-2020-1950, CVE-2020-1951)

    It was discovered that Apache Tika incorrectly handled certain regular expressions. An attacker could     possibly use this issue to cause a denial of service. (CVE-2022-30126, CVE-2022-30973, CVE-2022-33879)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Apache Tika, a regular expression in our StandardsText class, used by the
    StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially
    crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a
    non-standard handler. This is fixed in 1.28.2 and 2.4.0 (CVE-2022-30126)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the Oct 2022 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilites:

  - Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component:     Framework (dojo)). The supported version that is affected is 3.0.3.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Communications Convergence. Successful     attacks of this vulnerability can result in takeover of Oracle Communications Convergence. (CVE-2021-23450)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (jackson-databind)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal.     Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle WebCenter Portal. (CVE-2020-36518)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (Apache Santuario XML Security For Java)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0.     Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or     complete access to all Oracle WebCenter Portal accessible data. (CVE-2021-40690)

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Document     Management (jackson-databind)). Supported versions that are affected are 17.7-17.12, 18.8, 19.12, 20.12     and 21.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera Unifier.
    (CVE-2020-36518)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Platform, User Interface (Apache Xerces-J)). Supported versions that are affected are 17.7-17.12, 18.8,     19.12, 20.12 and 21.12. Easily exploitable vulnerability allows unauthenticated attacker with network     access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a     person other than the attacker. Successful attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera Unifier. (CVE-2022-23437)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Document     Management (Apache Tika)). Supported versions that are affected are 17.7-17.12, 18.8, 19.12, 20.12 and     21.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure     where Primavera Unifier executes to compromise Primavera Unifier. Successful attacks require human     interaction from a person other than the attacker. Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera Unifier.
    (CVE-2022-30126)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
259536	Linux Distros Unpatched Vulnerability : CVE-2022-30126	Nessus	Misc.	Local	medium
237252	Ubuntu 20.04 LTS / 22.04 LTS : Apache Tika vulnerabilities (USN-7529-1)	Nessus	Ubuntu Local Security Checks	Local	medium
418853	SCA: security update for org.apache.tika:tika-core (GHSA-rpjm-422r-95mh)	Tenable Cloud Security	SCA Checks	Local	medium
418853	SCA: security update for org.apache.tika:tika-core (GHSA-rpjm-422r-95mh)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
166335	Oracle WebCenter Portal Multiple Vulnerabilities (Oct 2022 CPU)	Nessus	Misc.	Local	critical
163289	Oracle Primavera Unifier (Jul 2022 CPU)	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2022-30126

medium

Tenable Plugins

medium

medium

medium

medium

critical

high