Debian Libpdfbox-Java vulnerabilities

CVE-2016-2175 [HIGH] CVE-2016-2175: libpdfbox-java - Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize th... Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF. Scope: local bookworm: resolved (fixed in 1:1.8.12-1) bullseye: resolved (fixed in 1:1.8.12-1) forky: resolved (fixed in 1:1.8.12-1) sid: resolved (fixed in 1:1.8.

CVE-2018-8036 [MEDIUM] CVE-2018-8036: libpdfbox-java - In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or... In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser. Scope: local bookworm: resolved (fixed in 1:1.8.15-1) bullseye: resolved (fixed in 1:1.8.15-1) forky: resolved (fixed in 1:1.8.15-1) sid: resolved (fixed in 1:1.8.15-

CVE-2021-31811 [MEDIUM] CVE-2021-31811: libpdfbox-java - In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Except... In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2021-27906 [MEDIUM] CVE-2021-27906: libpdfbox-java - A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading ... A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2021-31812 [MEDIUM] CVE-2021-31812: libpdfbox-java - In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop whil... In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2021-27807 [MEDIUM] CVE-2021-27807: libpdfbox-java - A carefully crafted PDF file can trigger an infinite loop while loading the file... A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2018-11797 [MEDIUM] CVE-2018-11797: libpdfbox-java - In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF... In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. Scope: local bookworm: resolved (fixed in 1:1.8.16-1) bullseye: resolved (fixed in 1:1.8.16-1) forky: resolved (fixed in 1:1.8.16-1) sid: resolved (fixed in 1:1.8.16-1) trixie: resolved (fixed in