CVE-2021-31811

apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-31811

Katalog CVE

CVSS 5.5 · Medium EPSS 3,6%

Kerentanan Memory Allocation with Excessive Size Value pada apache pdfbox, fedoraproject fedora +10 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Rincian

Terbit di NVD
12 Juni 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-789: Memory Allocation with Excessive Size Value
CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari)
3,6% peluang dieksploitasi; lebih tinggi dari 89,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache pdfbox Versi 2.0.0 hingga 2.0.23
fedoraproject fedora Versi 33
fedoraproject fedora Versi 34
oracle banking corporate lending process management Versi 14.2.0
oracle banking corporate lending process management Versi 14.3.0
oracle banking corporate lending process management Versi 14.5.0
oracle banking credit facilities process management Versi 14.2.0
oracle banking credit facilities process management Versi 14.3.0
oracle banking credit facilities process management Versi 14.5.0
oracle banking supply chain finance Versi 14.2.0
oracle banking supply chain finance Versi 14.3.0
oracle banking supply chain finance Versi 14.5.0
oracle banking trade finance Versi 14.5
oracle banking treasury management Versi 14.5
oracle flexcube universal banking Versi 14.0.0 hingga 14.3.0
oracle flexcube universal banking Versi 14.5
oracle outside in technology Versi 8.5.5
oracle primavera unifier Versi 17.7 hingga 17.12
oracle primavera unifier Versi 18.8
oracle primavera unifier Versi 19.12
oracle primavera unifier Versi 20.12
oracle retail customer management and segmentation foundation Versi 18.1
oracle communications messaging server Versi 8.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.