NetSight
IP …
medium5.5

CVE-2021-31811

Uncontrolled memory consumption

Impact

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.pdfbox:pdfbox>= 2.0.0, < 2.0.242.0.24
mavenorg.apache.pdfbox:pdfbox-parent>= 2.0.0, < 2.0.242.0.24

Affected products

VendorProductAffected versions
ApachePdfbox
from 2.0.0 through 2.0.23
FedoraprojectFedora
Versions 33, 34
OracleBanking Corporate Lending Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Credit Facilities Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Supply Chain Finance
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Trade Finance
Version 14.5
OracleBanking Treasury Management
Version 14.5
OracleFlexcube Universal Banking
from 14.0.0 through 14.3.0
Version 14.5
OracleOutside In Technology
Version 8.5.5
OraclePrimavera Unifier
from 17.7 through 17.12
Versions 18.8, 19.12, 20.12
OracleRetail Customer Management And Segmentation Foundation
Version 18.1
OracleCommunications Messaging Server
Version 8.1

Weakness classification

CWE-789CWE-770

References