https://bugzilla.redhat.com/show_bug.cgi?id=1637492
Bug ID: 1637492
Summary: CVE-2018-11797 pdfbox: unbounded computation in parser
resulting in a denial of service
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abergmann(a)suse.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, anstephe(a)redhat.com,
bkearney(a)redhat.com, chazlett(a)redhat.com,
drieden(a)redhat.com, etirelli(a)redhat.com,
ggainey(a)redhat.com, gvarsami(a)redhat.com,
hghasemb(a)redhat.com, ibek(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jolee(a)redhat.com,
jschatte(a)redhat.com, jstastny(a)redhat.com,
kconner(a)redhat.com, krathod(a)redhat.com,
kverlaen(a)redhat.com, ldimaggi(a)redhat.com,
lpetrovi(a)redhat.com, meissner(a)suse.de,
nwallace(a)redhat.com, paradhya(a)redhat.com,
pszubiak(a)redhat.com, puntogil(a)libero.it,
rrajasek(a)redhat.com, rsynek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
sdaley(a)redhat.com, tcunning(a)redhat.com,
tkirby(a)redhat.com, tlestach(a)redhat.com,
vhalbert(a)redhat.com
A vulnerability related to parsing was found in Apache PDFBox parser. A
carefully crafted PDF file can trigger an extremely long running computation
when parsing the page tree.
External References:
https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361...
--
You are receiving this mail because:
You are on the CC list for the bug.