CVE:CVE-2021-31811
CNNVD:CNNVD-202106-1201
Apache PDFBox是美国阿帕奇（Apache）基金会的一款基于Java语言的开源工具库。该产品提供PDF文档创建和编辑等功能。
Apache PDFBox 存在安全漏洞，攻击者可利用该漏洞通过精心制作一个PDF文件在加载文件时触发一个OutOfMemory-Exception。以下产品和版本受到影响：Apache PDFBox version 2.0.23 and prior 2.0.x versions.
solution:Upgrade apache pdfbox to a higher version than 2.0.23,and avoid the version [2.0.0,2.0.23]; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_trade_finance to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_treasury_management to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle flexcube_universal_banking to a higher version than 14.3.0,14.5,and avoid the version [14.0.0,14.3.0],14.5; Upgrade oracle outside_in_technology to a higher version than 8.5.5,and avoid the version 8.5.5; Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,and avoid the version [17.7,17.12],18.8,19.12,20.12; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 18.1,and avoid the version 18.1; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1