NetSight
IP …
medium5.5

CVE-2021-31812

Infinite Loop in Apache PDFBox

Impact

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.pdfbox:pdfbox>= 2.0.0, < 2.0.242.0.24
mavenorg.apache.pdfbox:pdfbox-parent>= 2.0.0, < 2.0.242.0.24

Affected products

VendorProductAffected versions
ApachePdfbox
from 2.0.0 through 2.0.23
FedoraprojectFedora
Versions 33, 34
OracleBanking Corporate Lending Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Credit Facilities Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Supply Chain Finance
Versions 14.2.0, 14.3.0, 14.5.0
OracleRetail Customer Management And Segmentation Foundation
Version 18.1
OracleCommunications Messaging Server
Version 8.1

Weakness classification

CWE-834CWE-835

References