Security Bulletin: An Apache PDFBox security vulnerability has been identified with the embedded Content Manager used by IBM Business Automation Workflow (CVE-2018-8036)

Summary IBM Business Automation Workflow has addressed the following security vulnerability with the embedded Content Manager. Apache PDFBox is vulnerable to a denial of service, caused by an out-of-memory exception in AFMParser. By persuading a victim to open a specially-crafted file, a remote...

GHSA-C9JJ-3WVG-Q65H Vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

Vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

ba.sake:hepek_2.12 (>=0.2.1, <=0.3.1), cc.catalysts.boot:cat-boot-report-pdf (1.0.1) +80 more potentially affected by CVE-2019-0228 via org.apache.pdfbox:pdfbox (2.0.14)

org.apache.pdfbox:pdfbox MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox and may be impacted: - ba.sake:hepek2.12 =0.2.1, =2.0.4, =0.7.7, =1.0.0, =3.5.2, =3.5.2, =0.0.1-rc18, =0.0.1-rc19 and more Source cve...

Xxe

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

CVE-2019-0228 affects Apache PDFBox 2.0.14, enabling an XML External Entity (XXE) attack via crafted XFDF. IBM advisories fix the vulnerability by upgrading IBM Operations Analytics - Log Analysis to version 1.3.7 (PDFBox handling) and Fedora advisories show a PDFBox update to 2.0.16. The vulnera...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

ba.sake:hepek_2.12 (>=0.2.1, <=0.3.1), cc.catalysts.boot:cat-boot-report-pdf (1.0.1) +80 more potentially affected by CVE-2019-0228 via org.apache.pdfbox:pdfbox (2.0.14)

org.apache.pdfbox:pdfbox MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox and may be impacted: - ba.sake:hepek2.12 =0.2.1, =2.0.4, =0.7.7, =1.0.0, =3.5.2, =3.5.2, =0.0.1-rc18, =0.0.1-rc19 and more Source cve...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228: Improper Restriction of XML External Entity Reference

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XFDF...

XML External Entity (XXE)

Apache PDFBox is vulnerable to XML external entity XXE attacks. The XML parser does not disable external DTDs, which would allow an attacker to perform XXE attacks using a malicious XFDF file...

PT-2019-5795

Name of the Vulnerable Software and Affected Versions Apache PDFBox version 2.0.14 Description The issue is related to the incorrect restriction of XML external entity references in the Java library Apache PDFBox. This can be exploited by a remote attacker to conduct XML External Entity XXE attac...

openSUSE Security Update : apache-pdfbox (openSUSE-2019-924)

This update for apache-pdfbox fixes the following security issue : - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. bsc1111009 : This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C...

openSUSE Security Update : apache-pdfbox (openSUSE-2019-670)

This update for apache-pdfbox fixes the following issues : Security issue fixed : - CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue bsc1099721. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

Security Bulletin: IBM FileNet Content Manager and IBM Enterprise Content Management Text Search security vulnerability in Apache PDFBox

Summary Denial of service vulnerability may affect Apache PDFBox v1.8.15 used by IBM FileNet Content Manager and IBM Enterprise Content Management Text Search. Vulnerability Details CVEID: CVE-2018-11797 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by a flaw when parsin...