VDB

CVE-2021-31811

CVE-2021-31811 PUBLISHED CVSS 5.5 MEDIUM

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

EPSS 3.44% · 88.5th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
3.44%
88.5th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlibpdfbox2-java2.0.7-1, 2.0.13-2~18.04, 2.0.8-2
Ubuntu:16.04:LTSlibpdfbox-java0, 1:1.8.10-1, 1:1.8.10-2
Ubuntu:24.04:LTSlibpdfbox2-java2.0.29-1, 2.0.27-2, 0
Ubuntu:18.04:LTSlibpdfbox-java0, *, *
Ubuntu:25.10libpdfbox-java*, 0
Ubuntu:25.10libpdfbox2-java2.0.29-1, 0
Ubuntu:24.04:LTSlibpdfbox-java1:1.8.16-5, 1:1.8.16-4, 0
Ubuntu:20.04:LTSlibpdfbox-java0, 1:1.8.16-2
Ubuntu:22.04:LTSlibpdfbox-java0, 1:1.8.16-2
Ubuntu:22.04:LTSlibpdfbox2-java2.0.24-2, 2.0.25-1, 2.0.23-1
Ubuntu:20.04:LTSlibpdfbox2-java2.0.16-1, 0, 2.0.17-1

Timeline

  • Jun 12, 2021 CVE Published
  • Jun 12, 2021 PoC Published
  • Jun 13, 2021 EPSS Score
  • Jun 14, 2021 EPSS Score
  • Jul 21, 2021 EPSS Score
  • Aug 14, 2021 EPSS Score
  • Oct 14, 2021 EPSS Score
  • Dec 14, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 13, 2022 EPSS Score
  • Apr 14, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›