https://bugzilla.redhat.com/show_bug.cgi?id=1637492
Bug ID: 1637492 Summary: CVE-2018-11797 pdfbox: unbounded computation in parser resulting in a denial of service Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: anemec@redhat.com CC: abergmann@suse.com, aileenc@redhat.com, alazarot@redhat.com, anstephe@redhat.com, bkearney@redhat.com, chazlett@redhat.com, drieden@redhat.com, etirelli@redhat.com, ggainey@redhat.com, gvarsami@redhat.com, hghasemb@redhat.com, ibek@redhat.com, java-sig-commits@lists.fedoraproject.org, jcoleman@redhat.com, jolee@redhat.com, jschatte@redhat.com, jstastny@redhat.com, kconner@redhat.com, krathod@redhat.com, kverlaen@redhat.com, ldimaggi@redhat.com, lpetrovi@redhat.com, meissner@suse.de, nwallace@redhat.com, paradhya@redhat.com, pszubiak@redhat.com, puntogil@libero.it, rrajasek@redhat.com, rsynek@redhat.com, rwagner@redhat.com, rzhang@redhat.com, sdaley@redhat.com, tcunning@redhat.com, tkirby@redhat.com, tlestach@redhat.com, vhalbert@redhat.com
A vulnerability related to parsing was found in Apache PDFBox parser. A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.
External References:
https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91...