CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Published: Jun 12, 2021
Updated: Nov 8, 2023
CVE: CVE-2021-31811
GHSA: GHSA-fg3j-q579-v8x4
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Affected Software
References

Software	From	Fixed in
apache / pdfbox	2.0.0	2.0.23.x
fedoraproject / fedora	33	33.x
fedoraproject / fedora	34	34.x
oracle / primavera_unifier	18.8	18.8.x
oracle / primavera_unifier	17.7	17.12.x
oracle / flexcube_universal_banking	14.0.0	14.3.0.x
oracle / outside_in_technology	8.5.5	8.5.5.x
oracle / primavera_unifier	19.12	19.12.x
oracle / primavera_unifier	20.12	20.12.x
oracle / banking_credit_facilities_process_management	14.3.0	14.3.0.x
oracle / banking_corporate_lending_process_management	14.3.0	14.3.0.x
oracle / communications_messaging_server	8.1	8.1.x
oracle / banking_supply_chain_finance	14.2.0	14.2.0.x
oracle / banking_credit_facilities_process_management	14.2.0	14.2.0.x
oracle / banking_credit_facilities_process_management	14.5.0	14.5.0.x
oracle / banking_corporate_lending_process_management	14.2.0	14.2.0.x
oracle / banking_corporate_lending_process_management	14.5.0	14.5.0.x
oracle / banking_supply_chain_finance	14.5.0	14.5.0.x
oracle / banking_supply_chain_finance	14.3.0	14.3.0.x
oracle / retail_customer_management_and_segmentation_foundation	18.1	18.1.x
oracle / banking_trade_finance	14.5	14.5.x
oracle / banking_treasury_management	14.5	14.5.x
oracle / flexcube_universal_banking	14.5	14.5.x
org.apache.pdfbox / pdfbox	2.0.0	2.0.24
org.apache.pdfbox / pdfbox-parent	2.0.0	2.0.24

Vulnerability Database

289,599

CVE-2021-31811