CVE-2018-8036

🗓️ 03 Jul 2018 20:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 115 Views

Apache PDFBox vulnerability - infinite loop leads to out of memory exceptio

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache PDFBox affects Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2018-8036)	15 Apr 202111:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM FileNet Content Manager affected by Apache PDFBox security vulnerability	16 Jan 201920:15	–	ibm
IBM Security Bulletins	Security Bulletin: A Vulnerability in Apache PDFBox Affects Transformation Extender	12 Nov 201819:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability found in fontbox-1.8.1.jarr which is shipped with IBM® Intelligent Operations Center(CVE-2018-8036)	5 Sep 202312:36	–	ibm
IBM Security Bulletins	Security Bulletin: An Apache PDFBox security vulnerability has been identified with the embedded Content Manager used by IBM Business Automation Workflow (CVE-2018-8036)	10 Jul 201921:40	–	ibm
IBM Security Bulletins	Security Bulletin: Apache PDFBox as used in IBM QRadar Incident Forensics is vulnerable to Publicly disclosed vulnerability. (CVE-2018-8036)	3 Dec 201821:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DITA, Apache Batik, Apache FOP may affect IBM Business Automation Workflow and IBM Case Manager	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Log Analysis Security Bulletin List	1 Sep 202111:04	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosured vulnerability found by vFinder: (All) Apache PDFBox	12 Feb 202114:22	–	ibm
0day.today	Apache PDFBox 1.8.14 / 2.0.10 Denial Of Service Vulnerability	4 Jul 201800:00	–	zdt

NVD

Vulners

Node

apache pdfboxRange1.8.0–1.8.14

apache pdfboxRange2.0.0–2.0.10

apache pdfboxMatch2.0.0rc1

apache pdfboxMatch2.0.0rc2

apache pdfboxMatch2.0.0rc3

[
  {
    "product": "Apache PDFBox",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.0 to 1.8.14"
      },
      {
        "status": "affected",
        "version": "2.0.0RC1 to 2.0.10"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/9f62f742fd4fcd81654a9533b8a71349b064250840592bcd502dcfb6%40%3Cusers.pdfbox.apache.org%3E
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ/
lists	www.lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540%40%3Cdev.syncope.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX/
access	www.access.redhat.com/errata/RHSA-2018:2669

21 Nov 2024 04:13Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 36.5

EPSS0.00591

CWE-835