VDB
CVE-2018-8036
CVE-2018-8036
PUBLISHED
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
EPSS 0.59% · 69.6th percentile
Risk Scores
EPSS Score
0.59%
69.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | libpdfbox-java | *, 1:1.8.13-2, 0 |
| Ubuntu:16.04:LTS | libpdfbox-java | *, *, 0 |
| Ubuntu:18.04:LTS | libpdfbox2-java | 2.0.8-2, 2.0.9-1, 2.0.8-1 |
Exploit Intelligence
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Apache synapse 反序列化 CVE–2017–15708 (github-poc)
- Proof of concept for CVE-2016-8858 (github-poc)
- Proof of concept for CVE-2016-8858 (github-poc)
- Proof of concept for CVE-2016-8858 (github-poc)
…and 984 more exploits
Timeline
- Apr 30, 2017 PoC Published
- Jul 3, 2018 CVE Published
- Jul 4, 2018 PoC Published
- Oct 3, 2019 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Jun 28, 2021 PoC Published
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 22, 2022 PoC Published
References
- https://ubuntu.com/security/CVE-2018-8036 third-party-advisory
- http://www.openwall.com/lists/oss-security/2018/06/29/2 third-party-advisory
- https://lists.apache.org/thread.html/9f62f742fd4fcd81654a9533b8a71349b064250840592bcd502dcfb6@%3Cusers.pdfbox.apache.org%3E third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-8036 third-party-advisory