CVE-2019-10088: Out of memory

August 2, 2019 (updated August 12, 2019)

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika’s RecursiveParserWrapper.

References

lists.apache.org/thread.html/1c63555609b737c20d1bbfa4a3e73ec488e3408a84e2f5e47e1b7e08@%3Cdev.tika.apache.org%3E
lists.apache.org/thread.html/fb6c84fd387de997e5e366d50b0ca331a328c466432c80f8c5eed33d@%3Cdev.tika.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2019-10088

Detect and mitigate CVE-2019-10088 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →