GHSA-fg3j-q579-v8x4

Suggest an improvement
Source
https://github.com/advisories/GHSA-fg3j-q579-v8x4
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-fg3j-q579-v8x4/GHSA-fg3j-q579-v8x4.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-fg3j-q579-v8x4
Aliases
Published
2021-06-15T15:54:32Z
Modified
2024-03-08T05:34:54Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Uncontrolled memory consumption
Details

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Database specific 
{
    "cwe_ids":  [
        "CWE-770",
        "CWE-789"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-06-14T19:39:19Z",
    "nvd_published_at":  "2021-06-12T10:15:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Maven / org.apache.pdfbox:pdfbox

Package

Name
org.apache.pdfbox:pdfbox
View open source insights on deps.dev
Purl
pkg:maven/org.apache.pdfbox/pdfbox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0.0
Fixed
2.0.24

Affected versions

2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-fg3j-q579-v8x4/GHSA-fg3j-q579-v8x4.json"

Maven / org.apache.pdfbox:pdfbox-parent

Package

Name
org.apache.pdfbox:pdfbox-parent
View open source insights on deps.dev
Purl
pkg:maven/org.apache.pdfbox/pdfbox-parent

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0.0
Fixed
2.0.24

Affected versions

2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-fg3j-q579-v8x4/GHSA-fg3j-q579-v8x4.json"