Not rated
CVE-2018-8036 In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite…
Description
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache PDFBox | Versions not published |
References
- RHSA-2018:2669 access.redhat.com
- [users] 20180629 [CVE-2018-8036] DoS (OOM) Vulnerability in Apache PDFBox's AFMParser lists.apache.org
- FEDORA-2019-9e91afa2be lists.fedoraproject.org
- FEDORA-2019-6fa01d12b4 lists.fedoraproject.org
- www.oracle.com www.oracle.com
- [syncope-dev] 20200423 Re: Time to cut 2.1.6 / 2.0.15? lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache PDFBox
The 6 CVEs of Apache PDFBox →
CVE-2021-31811
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Not rated
CVE-2021-31812
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file
Not rated
CVE-2021-27906
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Not rated
CVE-2021-27807
A carefully crafted PDF file can trigger an infinite loop while loading the file
Not rated