CVE-2021-31812

apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-31812

Katalog CVE

CVSS 5.5 · Medium EPSS 3,1%

Kerentanan Excessive Iteration pada apache pdfbox, fedoraproject fedora +5 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Rincian

Terbit di NVD
12 Juni 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-834: Excessive Iteration
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
EPSS (30 hari)
3,1% peluang dieksploitasi; lebih tinggi dari 87,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache pdfbox Versi 2.0.0 hingga 2.0.23
fedoraproject fedora Versi 33
fedoraproject fedora Versi 34
oracle banking corporate lending process management Versi 14.2.0
oracle banking corporate lending process management Versi 14.3.0
oracle banking corporate lending process management Versi 14.5.0
oracle banking credit facilities process management Versi 14.2.0
oracle banking credit facilities process management Versi 14.3.0
oracle banking credit facilities process management Versi 14.5.0
oracle banking supply chain finance Versi 14.2.0
oracle banking supply chain finance Versi 14.3.0
oracle banking supply chain finance Versi 14.5.0
oracle retail customer management and segmentation foundation Versi 18.1
oracle communications messaging server Versi 8.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.