PT-2023-5262 · Djvulibre+5 · Djvulibre+5

Zfeixq · Publicado 2023-08-22 · Atualizado 2025-11-29 · CVE-2021-46310

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions djvulibre version 3.5.28

Description The issue is related to a lack of check for division by zero in the IW44Image.cpp component of the djvulibre library, which allows attackers to cause a denial of service. This can be exploited by a remote attacker to disrupt service.

Recommendations For djvulibre version 3.5.28, consider applying a patch or updating to a newer version that fixes the issue in IW44Image.cpp to prevent division by zero errors. As a temporary workaround, consider restricting access to the IW44Image.cpp component until a patch is available.

Exploit

Correção

DoS

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALT-PU-2025-12685

ALT-PU-2025-12687

BDU:2023-05879

CVE-2021-46310

DLA-4247-1

MGASA-2024-0183

OESA-2023-1641

OPENSUSE-SU-2023_3520-1

OPENSUSE-SU-2024:13178-1

ROSA-SA-2024-2428

SUSE-SU-2023:3520-1

SUSE-SU-2023:3755-1

SUSE-SU-2023_3520-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Red Os

Suse

Djvulibre

Referências · 44

• 🔥 https://sourceforge.net/p/djvu/bugs/345 · Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2021-46310 · Aviso do Fabricante
• https://reddit.com/r/debian/comments/1n79g7f/debian_131_and_1212_20250906 · Publicação no Reddit
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46310 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2025/07/msg00007.html · Nota
• https://osv.dev/vulnerability/MGASA-2024-0183 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=33221 · Nota
• https://security-tracker.debian.org/tracker/CVE-2021-46310 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1641 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH · Aviso do Fabricante
• https://bugzilla.suse.com/1214672 · Nota
• https://abf.rosa.ru/advisories/ROSA-SA-2024-2428 · Nota