OPENSUSE-SU-2024:10622-1 apache-pdfbox-2.0.23-1.3 on GA media

These are all security issues fixed in the apache-pdfbox-2.0.23-1.3 package on the GA media of openSUSE Tumbleweed...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.BaseParser.parseDirObject

Detailed Report: https://oss-fuzz.com/testcase?key=6589172271677440 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Advisory ROSA-SA-2023-2271

software: pdfbox 2.0.24 WASP: ROSA-CHROME packageevrstring: pdfbox-2.0.24-1.src.rpm CVE-ID: CVE-2021-27807 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A carefully crafted PDF file may cause an infinite loop when loading the file. This issue affects Apache PDFBox version 2.0.22 and earlier versions of...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5484776251064320 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.util.ArrayList.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4779007763415040 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.ArrayList...

Security Bulletin: Vulnerability found in pdfbox-1.8.1.jar which is shipped with IBM® Intelligent Operations Center(220742, CVE-2018-11797, CVE-2016-2175)

Summary Vulnerability have been identified in pdfbox-1.8.1.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/sun.nio.cs.UTF_8.newDecoder

Detailed Report: https://oss-fuzz.com/testcase?key=5064976463953920 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.UTF8.newDecoder...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.lang.StackTraceElement.of

Detailed Report: https://oss-fuzz.com/testcase?key=4903004044918784 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.StackTraceElement.of...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.nio.ByteBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=6067357397942272 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.ByteBuffer.wrap...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.BaseParser.parseCOSDictionaryNameValuePair

Detailed Report: https://oss-fuzz.com/testcase?key=6347015754481664 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.lang.StringUTF16.newBytesFor

Detailed Report: https://oss-fuzz.com/testcase?key=6278563555573760 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.StringUTF16.newBytesFor...

pdfbox:PDFStreamParserFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5160680909832192 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.PDFStreamParser.parseNextToken

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=6214593083736064 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.accept

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=5384102598279168 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecurs

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=4650177546551296 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6253324396265472 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.PDFStreamParser.parseNextToken

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=4960578058452992 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in org.junit.jupiter.engine.extension.TimeoutExtension.intercept

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=5900407330439168 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.BaseParser.parseCOSDictionaryValue

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=4577002547183616 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

SUSE CVE-2016-2175

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF...