Rewterz

Rewterz Threat Alert – CVE-2021-22986 – Active Exploitation of F5 BIG-IP Flaw

March 20, 2021
Rewterz

Rewterz Threat Alert – PYSA Ransomware – IOCs

March 22, 2021

Rewterz Threat Advisory – Apache PDFBox denial of service

Severity

Medium

Analysis Summary

CVE-2021-27906

Apache PDFBox is vulnerable to a denial of service, caused by an OutOfMemory-Exception flaw. By persuading a victim to open a specially-crafted .PDF file, a remote attacker could exploit this vulnerability to cause the application to crash.

Impact

Denial of service

Affected Vendors

Apache

Affected Products

Apache PDFBox 2.0.21

Remediation

Upgrade to the latest version of PDFBox (2.0.22 or later).

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.