VDB
CVE-2018-11797
CVE-2018-11797
PUBLISHED
CVSS 5.5 MEDIUM
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.
EPSS 3.52% · 88.8th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
3.52%
88.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | libpdfbox-java | 1:1.8.13-2, 1:1.8.13-1, 0 |
| Ubuntu:16.04:LTS | libpdfbox-java | 1:1.8.10-2, *, 0 |
| Ubuntu:18.04:LTS | libpdfbox2-java | 2.0.8-2, 2.0.9-1, 2.0.8-1 |
Timeline
- Oct 5, 2018 CVE Published
- Sep 10, 2019 CVE Updated
- Apr 14, 2021 EPSS Score
- May 19, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 17, 2025 EPSS Score
- May 1, 2025 EPSS Score
- May 4, 2025 EPSS Score
- Jun 1, 2025 EPSS Score
- Jul 1, 2025 EPSS Score
- Jul 4, 2025 EPSS Score
References
- https://ubuntu.com/security/CVE-2018-11797 third-party-advisory
- https://www.openwall.com/lists/oss-security/2018/10/05/4 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-11797 third-party-advisory