← Back

CVE-2018-11797

nvd nist
Published: Oct 5, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.

Affected (9)

Apache
1 product
Pdfbox
Fedoraproject
1 product
Fedora
Oracle
1 product
Retail Xstore Point Of Service
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Pdfbox
From 1.8.0 to 1.8.15
Pdfbox
From 2.0.1 to 2.0.11
Pdfbox
Version 2.0.0
Pdfbox
Version 2.0 rc1
Pdfbox
Version 2.0 rc2
Pdfbox
Version 2.0 rc3
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 29
Fedora
Version 30
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Retail Xstore Point Of Service
Version 17.0

References (14)

Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.