Infinite loop in Apache POI - CVE-2017-12626

Vulnerability identifier: #VU12842

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-12626

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to infinite loops while parsing specially crafted WMF, EMF, MSG and macros and out of Memory exceptions while parsing specially crafted DOC, PPT and XLS. A remote attacker can cause the service to crash.

Apache POI
IBM OmniFind Text Search Server for DB2 for i
IBM Intelligent Operations Center
Oracle Communications Unified Inventory Management
Oracle Communications Diameter Signaling Router (DSR)
Oracle Enterprise Data Quality
IBM Cloud Application Performance Management (APM)
IBM Maximo Application Suite - Manage Component
IBM Business Automation Workflow
IBM Cloud Pak for Business Automation
Oracle Utilities Network Management System
Dell Support Assist Enterprise
Oracle Retail Xstore Point of Service
Oracle FLEXCUBE Private Banking
Oracle Application Testing Suite
IBM Engineering Systems Design Rhapsody
Oracle Endeca Information Discovery Studio
Oracle Endeca Information Discovery Integrator
Oracle Insurance Policy Administration
Oracle Enterprise Repository
JBoss Enterprise Application Platform
Primavera Gateway
PeopleSoft Enterprise PeopleTools
Oracle Agile PLM Framework
Oracle Retail Sales Audit
Instantis EnterpriseTrack
Primavera Unifier
Fedora
apache-poi

Update to version 3.17.

Dell Support Assist Enterprise - update to 4.00.06.00
IBM Intelligent Operations Center - update to 5.2.4
apache-poi - update to 3.17-1.fc28
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.14
IBM Maximo Application Suite - Manage Component - addressed in versions 8.6.26, 8.7.20, 9.0.13
IBM Engineering Systems Design Rhapsody - update to 9.0.1.0.5
IBM Business Automation Workflow - addressed in versions 21.0.3 IF028, 23.0.2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.28, 23.0.1.6

• https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b@%3Cdev...

• Red Hat update for jboss
• Multiple vulnerabilities in Oracle Application Testing Suite
• Multiple vulnerabilities in Oracle Endeca Information Discovery Studio
• Multiple vulnerabilities in Oracle Communications Diameter Signaling Router (DSR)
• Infinite loop in Oracle Communications Unified Inventory Management
• Multiple vulnerabilities in Oracle Retail Xstore Point of Service
• Infinite loop in Oracle Utilities Network Management System
• Multiple vulnerabilities in Oracle FLEXCUBE Private Banking
• Multiple vulnerabilities in Oracle Endeca Information Discovery Integrator
• Multiple vulnerabilities in Oracle Agile PLM Framework
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• Multiple vulnerabilities in Oracle Enterprise Repository
• Multiple vulnerabilities in Primavera Unifier
• Multiple vulnerabilities in Primavera Gateway
• Multiple vulnerabilities in Instantis EnterpriseTrack
• Multiple vulnerabilities in Oracle Insurance Policy Administration J2EE
• Multiple vulnerabilities in Oracle Enterprise Data Quality
• Infinite loop in Oracle Retail Sales Audit
• Infinite loop in The IBM Engineering System Design Rhapsody
• Multiple vulnerabilities in IBM Intelligent Operations Center (IOC)
• Infinite loop in IBM Application Performance Management products
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in Dell Support Assist Enterprise
• Fedora 28 update for apache-poi
• Multiple vulnerabilities in IBM Maximo Application Suite - Manage Component
• Multiple vulnerabilities in IBM OmniFind Text Search Server for DB2 for i