Denial of Service in Apache PDFBox Across Multiple Versions

CVE-2018-11797

What is CVE-2018-11797?

In certain versions of Apache PDFBox, a crafted PDF file can lead to prolonged processing times by inducing extensive computations when parsing the page tree. This issue can potentially allow an attacker to burden server resources significantly, leading to a Denial of Service condition.

References