CVE-2018-8036

Description

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBoxs AFMParser.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.547

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-8036 are fixed in Apache-pdfbox 1.8.15	Windows
Vulnerabilities CVE-2018-8036 are fixed in Apache-pdfbox 2.0.11	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0.3.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 22.0.2	Windows
Vulnerabilities CVE-2018-8036 are fixed in Apache-pdfbox for Linux 1.8.15	Linux
Vulnerabilities CVE-2018-8036 are fixed in Apache-pdfbox for Linux 2.0.11	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234