GitStock

apache/pdfbox · Security

Excessive Iteration Denial of Service in Apache PDFBox

GHSA ID
GHSA-2h3j-m7gr-25xj
CVE ID
CVE-2021-27807
Severity
medium
Published
Updated
CVSS
5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v3
5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

CWEs

  • CWE-834 · Excessive Iteration

References