~ / search / GHSA-gx96-vgf7-hwfg

GHSA-gx96-vgf7-hwfg

In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-11797

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.pdfbox:pdfbox >= 1.8.0, < 1.8.16 1.8.16
Maven org.apache.pdfbox:pdfbox >= 2.0.0, < 2.0.12 2.0.12

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.

References

External links from the advisory. They lead to third-party sites.