Описание
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat BPM Suite 6 | pdfbox | Out of support scope | ||
| Red Hat Integration Camel K 1 | pdfbox | Affected | ||
| Red Hat Integration Camel Quarkus 1 | pdfbox | Not affected | ||
| Red Hat JBoss BRMS 6 | pdfbox | Out of support scope | ||
| Red Hat JBoss Data Virtualization 6 | pdfbox | Out of support scope | ||
| Red Hat JBoss Fuse 6 | pdfbox | Out of support scope | ||
| Red Hat JBoss Fuse Service Works 6 | pdfbox | Out of support scope | ||
| Red Hat Fuse 7.9 | pdfbox | Fixed | RHSA-2021:3140 | 11.08.2021 |
| Red Hat Integration | Fixed | RHSA-2021:3205 | 18.08.2021 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-835
https://bugzilla.redhat.com/show_bug.cgi?id=1941055pdfbox: infinite loop while loading a crafted PDF file
EPSS
Процентиль: 86%
0.02979
Низкий
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 5 лет назад
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
CVSS3: 5.5
nvd
больше 5 лет назад
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
CVSS3: 5.5
debian
больше 5 лет назад
A carefully crafted PDF file can trigger an infinite loop while loadin ...
CVSS3: 5.5
github
около 5 лет назад
Excessive Iteration Denial of Service in Apache PDFBox
EPSS
Процентиль: 86%
0.02979
Низкий
5.5 Medium
CVSS3