[Bug 1971658] New: CVE-2021-31812 pdfbox: infinite loop while loading a crafted PDF file
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1971658
Bug ID: 1971658
Summary: CVE-2021-31812 pdfbox: infinite loop while loading a
crafted PDF file
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, bibryam(a)redhat.com,
chazlett(a)redhat.com, drieden(a)redhat.com,
etirelli(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gvarsami(a)redhat.com,
hbraun(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jochrist(a)redhat.com,
jolee(a)redhat.com, jrokos(a)redhat.com,
jschatte(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, mnovotny(a)redhat.com,
nwallace(a)redhat.com, pantinor(a)redhat.com,
pjindal(a)redhat.com, puntogil(a)libero.it,
rhel8-maint(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, sergio(a)serjux.com,
tcunning(a)redhat.com, tkirby(a)redhat.com,
tzimanyi(a)redhat.com
Target Milestone: ---
Classification: Other
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop
while loading the file. This issue affects Apache PDFBox version 2.0.23 and
prior 2.0.x versions.
References:
https://www.openwall.com/lists/oss-security/2021/06/12/1
https://lists.apache.org/thread.html/ra2ab0ce69ce8aaff0773b8c1036438387ce...
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 4 months