Lucene search
Veracode Vulnerability DatabaseVERACODE:33990HistoryFeb 03, 2022 - 9:08 a.m.
Denial Of Service (DoS)
2022-02-0309:08:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
54.0%
iText is vulnerable to denial of service. The vulnerability exists due to an out-of-memory error via the component readStreamBytesRaw which allows an attacker to crash the system via a maliciously crafted PDF file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| itext 7 - kernel | le | 7.2.1 | |
| itext 7 - kernel | le | 7.2.1 |
Related
prion
prion
Design/Logic Flaw
2022-02-01 20:15:00
nvd
nvd
CVE-2022-24196
2022-02-01 20:15:11
github
github
Allocation of Resources Without Limits or Throttling in iText
2022-02-02 00:01:45
osv
osv
CVE-2022-24196
2022-02-01 20:15:11
Allocation of Resources Without Limits or Throttling in iText
2022-02-02 00:01:45
cve
cve
CVE-2022-24196
2022-02-01 20:15:11
ibm
ibm
cvelist
cvelist
CVE-2022-24196
2022-02-01 00:00:00