• Services
    • Asses
      • Compromise Assessment
      • APT Assessment
      • Penetration Testing
      • Secure Architecture Design & Review
      • Red Team Assessment
      • Purple Team Assessment
      • Social Engineering
      • Source Code Review
    • Transform
      • SOC Consultancy
      •     SOC Maturity Assessment
      •     SOC Model Evaluation
      •     SOC Gap Analysis
      •     SIEM Gap Analysis
      •     SIEM Optimization
      •     SOC Content Pack
    • Train
      • Security Awareness and Training
      • Tabletop Exercise
      • Simulated Cyber Attack Exercises
    • Respond
      • Incident Response
      • Incident Analysis
  • Managed Security
    • Managed Security Monitoring
      • Remote SOC
      • Onsite SOC
      • Hybrid SOC
    • Managed Security Services
      • Managed Detection and Response
      • Managed Endpoint Detection and Response
      • Managed Threat Intelligence
      • Managed Threat Hunting
      • Managed Risk-Based SOAR
      • Managed Penetration Testing
  • Solutions
  • Resources
    • Blog
    • Threat Advisory
  • Company
    • About Us
    • Careers
    • Contact
Rewterz Threat Advisory – Bank Servers Hacked to cause ATM cash-out
October 8, 2018
Rewterz Threat Advisory – CVE-2018-8460 & CVE-2018-8491 – Microsoft Internet Explorer 11 Multiple Memory Corruption Vulnerabilities
October 12, 2018

Rewterz Threat Advisory – Apache PDFBox Denial of Service vulnerability

October 8, 2018

A vulnerability has been reported in Apache PDFBox, which can be exploited by malicious people to cause a DoS (Denial of Service).

 

 

 

IMPACT:  NORMAL

 

 

PUBLISH DATE:  10-08-2018

 

 

OVERVIEW

 

 

A vulnerability in Apache PDFBox versions 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11 can be exploited to cause Denial of Service (DoS). The vulnerability requires a specially crafted PDF file to be exploited.

 

 

ANALYSIS

 

 

An error was found in the Apache PDFBox affected versions. This error can be exploited to trigger an extremely long running computation via a specially crafted PDF file.

 

 

The PDF file is configured to start an extremely long running computation when parsing the page tree. Limited information is available about the vulnerability at the time of creation of this advisory. However, updated and patched versions are available.

 

 

AFFECTED PRODUCTS

 

 

The vulnerability is reported in versions prior to 1.8.16 and prior to 2.0.12.

 

  • Apache PDFBox 1.8.15
  • Apache PDFBox 2.0.11

 

Earlier, unsupported Apache PDFBox versions may also be affected.

 

 

UPDATES

 

  • Update Apache PDFBox 1.8.15 to 1.8.16
  • Update Apache PDFBox 2.0.11 to 2.0.12

 

If you think you’re the victim of a cyber-attack, immediately send an email to info@rewterz.com.

  • Services
    • Asses
      • Compromise Assessment
      • APT Assessment
      • Penetration Testing
      • Secure Architecture Design & Review
      • Red Team Assessment
      • Purple Team Assessment
      • Social Engineering
      • Source Code Review
    • Respond
      • Incident Response
      • Incident Analysis
  • Transform
    • SOC Consultancy
    •     SOC Maturity Assessment
    •     SOC Model Evaluation
    •     SOC Gap Analysis
    •     SIEM Gap Analysis
    •     SIEM Optimization
    •     SOC Content Pack
  • Train
    • Security Awareness and Training
    • Tabletop Exercise
    • Simulated Cyber Attack Exercises
  • Managed Security
    • Managed Security Monitoring
      • Remote SOC
      • Onsite SOC
      • Hybrid SOC
    • Managed Security Services
      • Managed Detection and Response
      • Managed Endpoint Detection and Response
      • Managed Threat Intelligence
      • Managed Threat Hunting
      • Managed Risk-Based SOAR
      • Managed Penetration Testing
  • Solutions
  • Resources
    • Blog
    • Threat Advisory
  • Company
    • About Us
    • Careers
    • Contact
COPYRIGHT © REWTERZ. ALL RIGHTS RESERVED.