In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-11797 · ADVISORY
• GitHub Advisory GHSA-gx96-vgf7-hwfg · ADVISORY
• lists.apache.org/thread.html/645574bc50b886d39c20b4065d51ccb1cd5d3a6b4750a22edbb565eb@%3Cannounce.apache.org%3E · WEB
• lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a@%3Cannounce.apache.org%3E · WEB
• lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E · WEB
• lists.debian.org/debian-lts-announce/2018/10/msg00008.html · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX

org.apache.pdfbox:pdfbox のその他の脆弱性

• CVE-2021-31812中 5.5In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version…
• CVE-2021-31811中 5.5In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox…
• CVE-2021-27906中 5.5A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 an…
• CVE-2021-27807中 5.5A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior …
• CVE-2019-0228緊急 9.8Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (X…