{"schema_version":"1.7.5","id":"CVE-2021-28657","published":"2021-03-31T08:15:11.267Z","modified":"2026-07-08T05:48:43.259879022Z","aliases":["GHSA-567x-m4wm-87v8"],"related":["SUSE-SU-2021:2098-1","SUSE-SU-2021:2114-1"],"details":"A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/tika","events":[{"introduced":"0"},{"last_affected":"0090ebac8e4ff4083a9c0c5d3dc55f545ad6f951"}],"database_specific":{"cpe":"cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.25"}],"source":"CPE_RANGE"}}],"versions":["1.25","1.24.1","1.23","1.23-rc1","1.21","1.20","1.19.1","1.19.1-rc1","1.18-rc1","1.17","1.15-rc1","1.12-rc1","1.12"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-28657.json"}}],"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E"},{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210507-0004/"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"17.7"},{"last_affected":"17.12"}],"source":"CPE_RANGE","vendor_product":"oracle:primavera_unifier"},{"cpes":["cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.1"},{"last_affected":"8.1"}],"source":"CPE_STRING","vendor_product":"oracle:communications_messaging_server"},{"cpes":["cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:healthcare_foundation:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:healthcare_foundation:8.1.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3.0"},{"last_affected":"7.3.0"},{"introduced":"8.0.0"},{"last_affected":"8.0.0"},{"introduced":"8.1.0"},{"last_affected":"8.1.0"}],"source":"CPE_STRING","vendor_product":"oracle:healthcare_foundation"},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"18.8"},{"last_affected":"18.8"},{"introduced":"19.12"},{"last_affected":"19.12"},{"introduced":"20.12"},{"last_affected":"20.12"}],"source":"CPE_STRING","vendor_product":"oracle:primavera_unifier"},{"cpes":["cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:webcenter_portal"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}