Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache PDFBox | Apache PDFBox |
| Apache Software Foundation | Apache PDFBox | Apache PDFBox, Apache PDFBox |
| Maven | org.apache.pdfbox:pdfbox | 2.0.0, 2.0.0 |
Timeline
- Mar 19, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- May 2, 2021 EPSS Score
- Jun 22, 2021 EPSS Score
- Jul 21, 2021 EPSS Score
- Aug 23, 2021 EPSS Score
- Dec 25, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 25, 2022 EPSS Score
- Apr 28, 2022 EPSS Score
- Jun 29, 2022 EPSS Score
References
- x_refsource_MISC
- [oss-security] 20210319 CVE-2021-27807: Apache PDFBox: A carefully crafted PDF file can trigger an infinite loop while loading the file mailing-listx_refsource_MLIST
- [pdfbox-users] 20210320 CVE-2021-27807: Apache PDFBox: a carefully crafted PDF file can trigger an infinite loop while loading the file mailing-listx_refsource_MLIST
- [announce] 20210320 CVE-2021-27807: Apache PDFBox: a carefully crafted PDF file can trigger an infinite loop while loading the file mailing-listx_refsource_MLIST
- [ofbiz-commits] 20210321 [ofbiz-framework] branch trunk updated: Fixed: Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 (OFBIZ-12205) mailing-listx_refsource_MLIST
- [ofbiz-notifications] 20210321 [jira] [Created] (OFBIZ-12205) Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 mailing-listx_refsource_MLIST
- [ofbiz-notifications] 20210321 [jira] [Commented] (OFBIZ-12205) Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 mailing-listx_refsource_MLIST
- [ofbiz-notifications] 20210321 [jira] [Updated] (OFBIZ-12205) Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 mailing-listx_refsource_MLIST
- [ofbiz-commits] 20210321 [ofbiz-framework] branch release17.12 updated: Fixed: Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 (OFBIZ-12205) mailing-listx_refsource_MLIST
- [ofbiz-notifications] 20210321 [jira] [Closed] (OFBIZ-12205) Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 mailing-listx_refsource_MLIST
- [ofbiz-commits] 20210321 [ofbiz-framework] branch release18.12 updated: Fixed: Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 (OFBIZ-12205) mailing-listx_refsource_MLIST
- [pdfbox-dev] 20210322 OSS-Fuzz integration mailing-listx_refsource_MLIST
- FEDORA-2021-93469e0030 vendor-advisoryx_refsource_FEDORA
- FEDORA-2021-8b17a2725e vendor-advisoryx_refsource_FEDORA
- FEDORA-2021-dc83ae690a vendor-advisoryx_refsource_FEDORA
- [ofbiz-notifications] 20210405 [jira] [Updated] (OFBIZ-12205) Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 mailing-listx_refsource_MLIST
- [james-notifications] 20210501 [GitHub] [james-project] chibenwa opened a new pull request #414: [UPGRADE] Adopt Apache Tika 1.26 mailing-listx_refsource_MLIST
- [pdfbox-dev] 20210518 CVE's mailing-listx_refsource_MLIST
- x_refsource_MISC
- x_refsource_MISC
…and 2 more