Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: 2021-0378 Moderate: Pdfbox Memory And Loop Issues

mageia
Calendar Grey July 27, 2021
Dist Mageia Esm H88
Newly released pdfbox versions address significant vulnerabilities impacting Apache PDFBox in Mageia. Further information is available.
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

Summary

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions (CVE-2021-31811).
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions (CVE-2021-31812).

References

- https://bugs.mageia.org/show_bug.cgi?id=29125

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D/

- https://www.cve.org/CVERecord?id=CVE-2021-31811

- https://www.cve.org/CVERecord?id=CVE-2021-31812

Topics%20covered

Topics Covered

security advisory moderate security fix memory issue infinite loop mageia pdfbox

Resolution

SRPMS

- 8/core/pdfbox-2.0.24-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 27 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0378.html
Type: security
CVE: CVE-2021-31811, CVE-2021-31812

Topics%20covered

Topics Covered

security advisory moderate security fix memory issue infinite loop mageia pdfbox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here