NetSight
IP …
medium5.5

CVE-2021-27906

Uncontrolled Memory Allocation in Apache PDFBox

Impact

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.pdfbox:pdfbox>= 2.0.0, < 2.0.232.0.23

Affected products

VendorProductAffected versions
ApachePdfbox
from 2.0.0 through 2.0.22
FedoraprojectFedora
Versions 32, 33, 34
OracleBanking Corporate Lending Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Credit Facilities Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Supply Chain Finance
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Trade Finance Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Treasury Management
Version 14.5
OracleBanking Virtual Account Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleCommunications Session Report Manager
from 8.0.0 through 8.2.4.0
OracleFlexcube Universal Banking
from 14.0.0 through 14.3.0
Version 14.5.0
OracleHyperion Financial Reporting
Versions 11.1.2.4, 11.2.6.0
OracleHyperion Infrastructure Technology
before 11.2.8.0

Weakness classification

CWE-789

References