{"schemaVersion":3,"id":"MGASA-2021-0184","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated pdfbox packages fix security vulnerabilities\n\nA carefully crafted PDF file can trigger an infinite loop while loading the\nfile. This issue affects Apache PDFBox Apache PDFBox version 2.0.22 and prior\n2.0.x versions (CVE-2021-27807).\n\nA carefully crafted PDF file can trigger an OutOfMemory-Exception while\nloading the file. This issue affects Apache PDFBox Apache PDFBox version\n2.0.22 and prior 2.0.x versions (CVE-2021-27906).","dates":{"published":"2021-04-12T19:59:59.000Z","modified":"2026-04-16T04:41:30.336Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"pdfbox","name":"pdfbox","label":"pdfbox","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/pdfbox","purlType":"rpm","versions":[{"text":"< 2.0.23-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.23-1.mga8","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2021-0184.html","label":"advisories.mageia.org/MGASA-2021-0184.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28682","label":"bugs.mageia.org/show_bug.cgi?id=28682","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2021/03/19/9","label":"www.openwall.com/lists/oss-security/2021/03/19/9","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://www.openwall.com/lists/oss-security/2021/03/19/10","label":"www.openwall.com/lists/oss-security/2021/03/19/10","hostname":"www.openwall.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-27807","CVE-2021-27906"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-04-12T19:59:59.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:41:30.336Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:46:02.315Z","stale":false,"partial":false}}