oss-sec mailing list archives
[UPDATE][CVE-2018-11797] DoS vulnerability in Apache PDFBox parser
From: Andreas Lehmkuehler <lehmi () apache org>
Date: Sat, 6 Oct 2018 11:00:28 +0200
[CVE-2018-11797] DoS vulnerability in Apache PDFBox parser Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache PDFBox <= 1.8.15 Apache PDFBox <= 2.0.11 Earlier, unsupported Apache PDFBox versions may be affected as well Description: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. Mitigation: Upgrade to Apache PDFBox 1.8.16 respectively 2.0.12 Credit: This issue was discovered by Shawn Rasheed and Jens Dietrich Website: https://pdfbox.apache.org/ Download: https://pdfbox.apache.org/download.cgi https://www.apache.org/dist/pdfbox/2.0.12/RELEASE-NOTES.txt https://www.apache.org/dist/pdfbox/1.8.16/RELEASE-NOTES.txt
Current thread:
- [UPDATE][CVE-2018-11797] DoS vulnerability in Apache PDFBox parser Andreas Lehmkuehler (Oct 06)