Published: 03/07/2018 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache pdfbox 2.0.0
apache pdfbox

Synopsis Important: Fuse 71 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat FuseRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed s ...

Debian Bug report logs - #902776 libpdfbox-java: CVE-2018-8036 Package: libpdfbox-java; Maintainer for libpdfbox-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for libpdfbox-java is src:libpdfbox-java (PTS, buildd, popcon) Reported by: Markus Koschany <apo@debianorg> Date: Sat ...

In Apache PDFBox 180 to 1814 and 200RC1 to 2010, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser ...

JQF + Zest: Semantic Fuzzing for Java JQF is a feedback-directed fuzz testing platform for Java, which uses the abstraction of property-based testing JQF is built on top of junit-quickcheck: a tool for generating random arguments for parametric Junit test methods JQF enables better input generation using coverage-guided fuzzing algorithms such as Zest Zest is an algorithm th

CWE-835 https://access.redhat.com/errata/RHSA-2018:2669 https://www.oracle.com/security-alerts/cpuapr2020.html https://lists.apache.org/thread.html/9f62f742fd4fcd81654a9533b8a71349b064250840592bcd502dcfb6%40%3Cusers.pdfbox.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ/https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540%40%3Cdev.syncope.apache.org%3E https://access.redhat.com/errata/RHSA-2018:2669 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-8036

CVE-2018-8036

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect