CVE-2018-11797

🗓️ 05 Oct 2018 20:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 136 Views

Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, long running computation when parsing page tree

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM FileNet Content Manager and IBM Enterprise Content Management Text Search security vulnerability in Apache PDFBox	14 Feb 201919:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache PDFBox affect Apache Solr shipped IBM Operations Analytics - Log Analysis Analysis (CVE-2018-11797)	15 Apr 202113:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties	24 Apr 202017:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability found in pdfbox-1.8.1.jar which is shipped with IBM® Intelligent Operations Center(220742, CVE-2018-11797, CVE-2016-2175)	5 Sep 202312:49	–	ibm
IBM Security Bulletins	Log Analysis Security Bulletin List	1 Sep 202111:04	–	ibm
CNVD	Apache PDFBox parser denial of service vulnerability	8 Oct 201800:00	–	cnvd
Cvelist	CVE-2018-11797	5 Oct 201820:00	–	cvelist
Debian	[SECURITY] [DLA 1547-1] libpdfbox-java security update	16 Oct 201816:02	–	debian
Debian CVE	CVE-2018-11797	5 Oct 201820:00	–	debiancve

NVD

Vulners

Node

apache pdfboxRange1.8.0–1.8.15

apache pdfboxRange2.0.1–2.0.11

apache pdfboxMatch2.0rc1

apache pdfboxMatch2.0rc2

apache pdfboxMatch2.0rc3

apache pdfboxMatch2.0.0-

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

oracle retail_xstore_point_of_serviceMatch17.0

[
  {
    "product": "Apache PDFBox",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.0 to 1.8.15"
      },
      {
        "status": "affected",
        "version": "2.0.0RC1 to 2.0.11"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ/
lists	www.lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a%40%3Cannounce.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2018/10/msg00008.html
lists	www.lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E
lists	www.lists.apache.org/thread.html/645574bc50b886d39c20b4065d51ccb1cd5d3a6b4750a22edbb565eb%40%3Cannounce.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX/

21 Nov 2024 03:44Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 3.15.5

EPSS0.0162