[CVE-2018-11797] DoS vulnerability in Apache PDFBox parser Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache PDFBox <= 1.8.15 Apache PDFBox <= 2.0.11 Earlier, unsupported Apache PDFBox versions may be affected as well Description: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. Mitigation: Upgrade to Apache PDFBox 1.8.16 respectively 2.0.12 Credit: This issue was discovered by Shawn Rasheed and Jens Dietrich Website: https://pdfbox.apache.org/ Download: https://pdfbox.apache.org/download.cgi https://www.apache.org/dist/pdfbox/2.0.12/RELEASE-NOTES.txt https://www.apache.org/dist/pdfbox/1.8.16/RELEASE-NOTES.txt
