~ / search / GHSA-2h3j-m7gr-25xj

GHSA-2h3j-m7gr-25xj

Excessive Iteration Denial of Service in Apache PDFBox

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-27807

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.pdfbox:pdfbox >= 2.0.0, < 2.0.23 2.0.23

Details

As written in the advisory (Markdown source, shown as plain text).

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

References

External links from the advisory. They lead to third-party sites.