Lucene search
Veracode Vulnerability DatabaseVERACODE:6899HistoryJul 02, 2018 - 7:11 a.m.
Denial Of Service (DoS)
2018-07-0207:11:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.007 Low
EPSS
Percentile
79.7%
Apache PDFBox is vulnerable to denial of service (DoS) attacks. A malicious user can pass an AFM file to the application to cause an out-of-memory exception that can crash the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache fontbox | le | 2.0.10 | |
| apache fontbox | le | 1.8.14 | |
| libpdfbox-java:bionic | eq | 1:1.8.13-2 | |
| libpdfbox2-java:bionic | eq | 2.0.9-1 |
References
access.redhat.com/errata/RHSA-2018:2669
lists.apache.org/thread.html/9f62f742fd4fcd81654a9533b8a71349b064250840592bcd502dcfb6@%3Cusers.pdfbox.apache.org%3E
lists.fedoraproject.org/archives/list/[email protected]/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ/
lists.fedoraproject.org/archives/list/[email protected]/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX/
svn.apache.org/viewvc?view=revision&revision=1834048
www.apache.org/dist/pdfbox/2.0.11/RELEASE-NOTES.txt
Related
prion
prion
Code injection
2018-07-03 20:29:00
nessus
nessus
openSUSE Security Update : apache-pdfbox (openSUSE-2019-670)
2019-03-27 00:00:00
openSUSE Security Update : apache-pdfbox (openSUSE-2018-975)
2018-09-07 00:00:00
openSUSE Security Update : apache-pdfbox (openSUSE-2018-1245)
2018-10-25 00:00:00
suse
suse
Security update for apache-pdfbox (moderate)
2018-09-07 12:07:46
Security update for apache-pdfbox (moderate)
2018-10-24 15:18:40
ibm
ibm
cve
cve
CVE-2018-8036
2018-07-03 20:29:00
debiancve
debiancve
CVE-2018-8036
2018-07-03 20:29:00
redhatcve
redhatcve
CVE-2018-8036
2018-07-03 05:20:02
ubuntucve
ubuntucve
CVE-2018-8036
2018-07-03 00:00:00
nvd
nvd
CVE-2018-8036
2018-07-03 20:29:00
cvelist
cvelist
CVE-2018-8036
2018-06-29 00:00:00
osv
osv
Loop with Unreachable Exit Condition in Apache PDFBox
2022-05-13 01:53:29
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:2630-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for apache-pdfbox (openSUSE-SU-2018:2645-1)
2018-10-26 00:00:00
openSUSE: Security Advisory for apache-pdfbox (openSUSE-SU-2018:3384-1)
2018-10-25 00:00:00
github
github
Loop with Unreachable Exit Condition in Apache PDFBox
2022-05-13 01:53:29
zdt
zdt
Apache PDFBox 1.8.14 / 2.0.10 Denial Of Service Vulnerability
2018-07-04 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: pdfbox-2.0.16-1.fc31
2019-09-14 16:39:49
[SECURITY] Fedora 29 Update: pdfbox-2.0.16-1.fc29
2019-09-09 08:07:18
[SECURITY] Fedora 30 Update: pdfbox-2.0.16-1.fc30
2019-09-09 07:34:18
redhat
redhat
(RHSA-2018:2669) Important: Fuse 7.1 security update
2018-09-11 07:52:48
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00