GitHub Advisoryadvisory · Maven

GHSA-2h3j-m7gr-25xj Excessive Iteration Denial of Service in Apache PDFBox

MEDIUM Published 2021-06-16 Modified 2021-10-21 Official page ↗
Aliases
CVE-2021-27807
Ecosystem
Maven
Packages
org.apache.pdfbox:pdfbox
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-834
Reviewed
2021-03-22

Affected packages

• Maven org.apache.pdfbox:pdfbox: >= 2.0.0, < 2.0.23 → fixed in 2.0.23

Description

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Related

Alias · CVE (1)

  • CVE-2021-27807 A carefully crafted PDF file can trigger an infinite loop while loading the file. vulnerability

Weakness · CWE (1)

  • CWE-834 Excessive Iteration weakness

References