Security Bulletin: IBM FileNet Content Manager affected by Apache PDFBox security vulnerability

Summary IBM FileNet Content Manager has addressed the following security vulnerability. Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerabilit...

Security Bulletin: Apache PDFBox as used in IBM QRadar Incident Forensics is vulnerable to Publicly disclosed vulnerability. (CVE-2018-8036)

Summary Publicly disclosed vulnerability in Apache PDFBox. Vulnerability Details CVEID: CVE-2018-8036 Description: Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a specially-crafted file, a remote attacker coul...

openSUSE Security Update : apache-pdfbox (openSUSE-2018-1422)

This update for apache-pdfbox fixes the following security issue : - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. bsc1111009 : This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C...

Security update for apache-pdfbox (moderate)

This update for apache-pdfbox fixes the following security issue: - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. bsc1111009: This update was imported from the SUSE:SLE-15:Update update project...

openSUSE: Security Advisory for apache-pdfbox (openSUSE-SU-2018:3798-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:3755-1 Security update for apache-pdfbox

This update for apache-pdfbox fixes the following security issue: - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. bsc1111009:...

Security Bulletin: A Vulnerability in Apache PDFBox Affects Transformation Extender

Summary Vulnerabilities in Apache PDFBox affect Transformation Extender. Vulnerability Details CVE-ID: CVE-2018-8036 Description: Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a specially-crafted file, a remot...

openSUSE: Security Advisory for apache-pdfbox (openSUSE-SU-2018:2645-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : apache-pdfbox (openSUSE-2018-1245)

This update for apache-pdfbox fixes the following security issue : - CVE-2018-8036: A crafted file could have triggered an infinite loop which lead to DoS bsc1099721. - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

openSUSE: Security Advisory for apache-pdfbox (openSUSE-SU-2018:3384-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for apache-pdfbox (moderate)

This update for apache-pdfbox fixes the following security issue: - CVE-2018-8036: A crafted file could have triggered an infinite loop which lead to DoS bsc1099721. - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

SUSE-SU-2018:3318-1 Security update for apache-pdfbox

This update for apache-pdfbox fixes the following security issue: - CVE-2018-8036: A crafted file could have triggered an infinite loop which lead to DoS bsc1099721. - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), be.thematchbox:abstractriver (>=1.0.1, <=1.1.0) +511 more potentially affected by CVE-2018-11797 via org.apache.pdfbox:pdfbox (>=1.8.0, <=1.8.15)

org.apache.pdfbox:pdfbox MAVEN version =1.8.0, =1.3, =1.0.1, =0.6, =0.3, =1.0, =0.2.0, =0.9, =3.0, =3.5.1 - com.findwise.hydra:hydra-tika-stages 0.4.5 - com.github.cka3o4huk:jmeter-graph-maven-plugin 0.1.1 and more Source cves: CVE-2018-11797 Source advisory: GHSA-GX96-VGF7-HWFG...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +784 more potentially affected by CVE-2018-11797 via org.apache.pdfbox:pdfbox (>=2.0.0, <=2.0.11)

org.apache.pdfbox:pdfbox MAVEN version =2.0.0, =0.9.6, =0.9.6, =0.1.1, =1.0.0, =2.0.0, =2.0.0, =0.1.8, =0.2.28 and more Source cves: CVE-2018-11797 Source advisory: GHSA-GX96-VGF7-HWFG...

GHSA-GX96-VGF7-HWFG In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), be.thematchbox:abstractriver (>=1.0.1, <=1.1.0) +731 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (>=1.0.0, <=1.8.11)

org.apache.pdfbox:pdfbox MAVEN version =1.0.0, =1.3, =1.0.1, =4.2.0, =1.2.1, =3.0.0, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =0.6, =0.8 and more Source cves: CVE-2016-2175 Source advisory: GHSA-4C32-XMGJ-2G98...

High severity vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), be.thematchbox:abstractriver (>=1.0.1, <=1.1.0) +731 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (>=1.0.0, <=1.8.11)

org.apache.pdfbox:pdfbox MAVEN version =1.0.0, =1.3, =1.0.1, =4.2.0, =1.2.1, =3.0.0, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =0.6, =0.8 and more Source cves: CVE-2016-2175 Source advisory: OSV:GHSA-4C32-XMGJ-2G98...

com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +50 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (2.0.0)

org.apache.pdfbox:pdfbox MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin 2.0.0 -...