Tracker / CVE-2018-11797
CVE-2018-11797
Medium 5.5
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.
Affected products and versions
| apache | pdfbox |
|---|---|
| apache | pdfbox · 1.8.0 → 1.8.15 |
| apache | pdfbox · 2.0.1 → 2.0.11 |
| fedoraproject | fedora |
| oracle | retail_xstore_point_of_service |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.