GitHub Advisoryadvisory · Maven

GHSA-7grw-6pjh-jpc9 Infinite Loop in Apache PDFBox

MEDIUM Published 2021-06-15 Modified 2022-02-08 Official page ↗
Aliases
CVE-2021-31812
Ecosystem
Maven
Packages
org.apache.pdfbox:pdfbox, org.apache.pdfbox:pdfbox-parent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-834, CWE-835
Reviewed
2021-06-14

Affected packages

• Maven org.apache.pdfbox:pdfbox: >= 2.0.0, < 2.0.24 → fixed in 2.0.24 • Maven org.apache.pdfbox:pdfbox-parent: >= 2.0.0, < 2.0.24 → fixed in 2.0.24

Description

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Related

Alias · CVE (1)

  • CVE-2021-31812 In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. vulnerability

Weakness · CWE (2)

  • CWE-834 Excessive Iteration weakness
  • CWE-835 Loop with Unreachable Exit Condition weakness

References