Lucene search

K
cvelistApacheCVELIST:CVE-2018-11797
HistoryOct 05, 2018 - 12:00 a.m.

CVE-2018-11797

2018-10-0500:00:00
apache
www.cve.org

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.

CNA Affected

[
  {
    "product": "Apache PDFBox",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.0 to 1.8.15"
      },
      {
        "status": "affected",
        "version": "2.0.0RC1 to 2.0.11"
      }
    ]
  }
]

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%