CVE-2021-27807

apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-27807

Katalog CVE

CVSS 5.5 · Medium EPSS 3,0%

Kerentanan Excessive Iteration pada apache pdfbox, fedoraproject fedora +13 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Rincian

Terbit di NVD
19 Maret 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-834: Excessive Iteration
EPSS (30 hari)
3,0% peluang dieksploitasi; lebih tinggi dari 87,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache pdfbox Versi 2.0.0 hingga 2.0.22
fedoraproject fedora Versi 32
fedoraproject fedora Versi 33
fedoraproject fedora Versi 34
oracle banking trade finance process management Versi 14.2.0
oracle banking trade finance process management Versi 14.3.0
oracle banking trade finance process management Versi 14.5.0
oracle banking treasury management Versi 14.5
oracle banking virtual account management Versi 14.2.0
oracle banking virtual account management Versi 14.3.0
oracle banking virtual account management Versi 14.5.0
oracle communications session report manager Versi 8.0.0 hingga 8.2.4.0
oracle flexcube universal banking Versi 14.0.0 hingga 14.3.0
oracle flexcube universal banking Versi 14.5.0
oracle hyperion financial reporting Versi 11.1.2.4
oracle hyperion financial reporting Versi 11.2.6.0
oracle hyperion infrastructure technology Semua versi sebelum 11.2.8.0
oracle outside in technology Versi 8.5.5
oracle primavera unifier Versi 17.7 hingga 17.12
oracle primavera unifier Versi 18.8
oracle primavera unifier Versi 19.12
oracle primavera unifier Versi 20.12
oracle retail customer management and segmentation foundation Versi 19.0
oracle retail xstore point of service Versi 16.0.6
oracle retail xstore point of service Versi 17.0.4
oracle retail xstore point of service Versi 18.0.3
oracle retail xstore point of service Versi 19.0.2
oracle retail xstore point of service Versi 20.0.1
oracle webcenter sites Versi 12.2.1.3.0
oracle webcenter sites Versi 12.2.1.4.0
oracle communications messaging server Versi 8.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.