Lucene search

IBM1291844FED4AD2084F05EDCB8E34FC4553A3B1314F52F28A14E2054A564595F5

HistoryApr 15, 2021 - 11:00 a.m.

Security Bulletin: Vulnerability in Apache PDFBox affects Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2018-8036)

2021-04-1511:00:39

www.ibm.com

0.007 Low

EPSS

Percentile

79.7%

JSON

Summary

There is a potential Resource Exhaustion vulnerability in Apache PDFBox that affects Apache Solr.

Vulnerability Details

CVEID:CVE-2018-8036
**DESCRIPTION:**Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause the application to enter into an infinite loop.
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/145592 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
Log Analysis	1.3.1
Log Analysis	1.3.2
Log Analysis	1.3.3
Log Analysis	1.3.4
Log Analysis	1.3.5
Log Analysis	1.3.6

Remediation/Fixes

Principal Product and Version(s) :	Fix details
IBM Operations Analytics - Log Analysis version 1.3.x	Upgrade to Log Analysis version 1.3.7
Download the 1.3.7-TIV-IOALA-FP here

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm smartcloud analyticseq1.3.

CPE	Name	Operator	Version
	ibm smartcloud analytics	eq	1.3.

0.007 Low

EPSS

Percentile

79.7%

JSON

Related for 1291844FED4AD2084F05EDCB8E34FC4553A3B1314F52F28A14E2054A564595F5