NetSight
IP …
medium5.5

CVE-2021-27807

Excessive Iteration Denial of Service in Apache PDFBox

Impact

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.pdfbox:pdfbox>= 2.0.0, < 2.0.232.0.23

Affected products

VendorProductAffected versions
ApachePdfbox
from 2.0.0 through 2.0.22
FedoraprojectFedora
Versions 32, 33, 34
OracleBanking Trade Finance Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Treasury Management
Version 14.5
OracleBanking Virtual Account Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleCommunications Session Report Manager
from 8.0.0 through 8.2.4.0
OracleFlexcube Universal Banking
from 14.0.0 through 14.3.0
Version 14.5.0
OracleHyperion Financial Reporting
Versions 11.1.2.4, 11.2.6.0
OracleHyperion Infrastructure Technology
before 11.2.8.0
OracleOutside In Technology
Version 8.5.5
OraclePrimavera Unifier
from 17.7 through 17.12
Versions 18.8, 19.12, 20.12
OracleRetail Customer Management And Segmentation Foundation
Version 19.0

Weakness classification

CWE-834

References