debian/libitext5-java vulnerabilities

Latest debian/libitext5-java CVEs

Newest publication first

1. DSA-5323-1 libitext5-java - security update

   Published 2023-01-19

   Unknown

2. DLA-3273-1 libitext5-java - security update

   Published 2023-01-18

   Unknown

3. CVE-2021-37819 PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

   Published 2022-09-09

   High·CVSS 7.5 EPSS 0.85%

   PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

4. CVE-2021-43113 Command injection in itext7-core

   Published 2021-12-15

   Critical·CVSS 9.8 EPSS 5.4%

   iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.