CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
apacheCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
apachepdfbox
2.0.0 ≤
𝑥
≤ 2.0.22
oraclebanking_corporate_lending_process_management
14.2.0
oraclebanking_corporate_lending_process_management
14.3.0
oraclebanking_corporate_lending_process_management
14.5.0
oraclebanking_credit_facilities_process_management
14.2.0
oraclebanking_credit_facilities_process_management
14.3.0
oraclebanking_credit_facilities_process_management
14.5.0
oraclebanking_supply_chain_finance
14.2.0
oraclebanking_supply_chain_finance
14.3.0
oraclebanking_supply_chain_finance
14.5.0
oraclebanking_trade_finance_process_management
14.2.0
oraclebanking_trade_finance_process_management
14.3.0
oraclebanking_trade_finance_process_management
14.5.0
oraclebanking_treasury_management
14.5
oraclebanking_virtual_account_management
14.2.0
oraclebanking_virtual_account_management
14.3.0
oraclebanking_virtual_account_management
14.5.0
oraclecommunications_session_report_manager
8.0.0 ≤
𝑥
≤ 8.2.4.0
oracleflexcube_universal_banking
14.0.0 ≤
𝑥
≤ 14.3.0
oracleflexcube_universal_banking
14.5.0
oraclehyperion_financial_reporting
11.1.2.4
oraclehyperion_financial_reporting
11.2.6.0
oraclehyperion_infrastructure_technology
𝑥
< 11.2.8.0
oracleoutside_in_technology
8.5.5
oraclepeoplesoft_enterprise_peopletools
8.58
oraclepeoplesoft_enterprise_peopletools
8.59
oracleprimavera_unifier
17.7 ≤
𝑥
≤ 17.12
oracleprimavera_unifier
18.8
oracleprimavera_unifier
19.12
oracleprimavera_unifier
20.12
oracleretail_customer_management_and_segmentation_foundation
19.0
oracleretail_xstore_point_of_service
16.0.6
oracleretail_xstore_point_of_service
17.0.4
oracleretail_xstore_point_of_service
18.0.3
oracleretail_xstore_point_of_service
19.0.2
oracleretail_xstore_point_of_service
20.0.1
oraclewebcenter_sites
12.2.1.3.0
oraclewebcenter_sites
12.2.1.4.0
oraclecommunications_messaging_server
8.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libpdfbox-java
bookworm
1:1.8.16-2
fixed
bullseye
1:1.8.16-2
fixed
buster
no-dsa
sid
1:1.8.16-5
fixed
trixie
1:1.8.16-5
fixed
libpdfbox2-java
bullseye
2.0.23-1
fixed
buster
no-dsa
bookworm
2.0.27-2
fixed
sid
2.0.29-1
fixed
trixie
2.0.29-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libpdfbox-java
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
dne
libpdfbox2-java
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needed
bionic
needed
xenial
dne
trusty
dne
References