Rewterz Threat Advisory – Apache PDFBox Denial of Service vulnerability

Monday, October 8, 2018

A vulnerability has been reported in Apache PDFBox, which can be exploited by malicious people to cause a DoS (Denial of Service).







PUBLISH DATE:  10-08-2018






A vulnerability in Apache PDFBox versions 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11 can be exploited to cause Denial of Service (DoS). The vulnerability requires a specially crafted PDF file to be exploited.






An error was found in the Apache PDFBox affected versions. This error can be exploited to trigger an extremely long running computation via a specially crafted PDF file.



The PDF file is configured to start an extremely long running computation when parsing the page tree. Limited information is available about the vulnerability at the time of creation of this advisory. However, updated and patched versions are available.






The vulnerability is reported in versions prior to 1.8.16 and prior to 2.0.12.


  • Apache PDFBox 1.8.15
  • Apache PDFBox 2.0.11


Earlier, unsupported Apache PDFBox versions may also be affected.





  • Update Apache PDFBox 1.8.15 to 1.8.16
  • Update Apache PDFBox 2.0.11 to 2.0.12


If you think you’re the victim of a cyber-attack, immediately send an email to

Data Sheets

Corporate Brochure

Our Story



Managed Security

Upcoming Rewterz Trainings/Events

Rewterz News

  • 13, December 2018 Rewterz Threat Advisory – Windows Server 2012/Windows RT 8.1/8.1 multiple vulnerabilities
  • 13, December 2018 Rewterz Threat Advisory – CVE-2018-8604 – Microsoft Exchange Server 2016 Profile Data Manipulation Vulnerability
  • 13, December 2018 Rewterz Threat Advisory – Microsoft Edge Memory Corruption Multiple Vulnerabilities
  • 13, December 2018 Rewterz Threat Advisory – CVE-2018-0732 – IBM Lotus Protector for Mail Security OpenSSL Denial of Service Vulnerability

Copyright © Rewterz. All rights reserved.