iTextPDF iText 7.1.17
Approved changes feed: RSS · Atom
cpe:2.3:a:itextpdf:itext:7.1.17:*:*:*:*:*:*:*
part: a version: 7.1.17 update: *
| Vendor | Itextpdf (6d5120da-c999-5e57-b3ef-b2b8bd75f668) |
|---|---|
| Product | Itext (74fb4263-e315-51dc-966f-391806fee6ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libitext1-java |
purl2cpe | 2026-06-01 10:14:23.033343 |
pkg:deb/debian/libitext5-java |
purl2cpe | 2026-06-01 10:14:23.033344 |
pkg:deb/ubuntu/libitext1-java |
purl2cpe | 2026-06-01 10:14:23.033346 |
pkg:deb/ubuntu/libitext5-java |
purl2cpe | 2026-06-01 10:14:23.033347 |
pkg:github/itext/itext7 |
purl2cpe | 2026-06-01 10:14:23.033349 |
pkg:maven/com.itextpdf/itextpdf |
purl2cpe | 2026-06-01 10:14:23.033350 |
pkg:nuget/itext7 |
purl2cpe | 2026-06-01 10:14:23.033352 |
pkg:rpm/opensuse/itextpdf |
purl2cpe | 2026-06-01 10:14:23.033353 |
pkg:sourceforge/itext |
purl2cpe | 2026-06-01 10:14:23.033354 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24198 |
vulnerable | 2026-06-08 05:40:59.742755 |
Details available
iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has not found it to be exploitable.
Published: 2022-02-01T00:00:00.000Z
Updated: 2024-08-03T04:07:01.606Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.