PT-2023-5262 · Djvulibre+5 · Djvulibre+5

Zfeixq · Published 2023-08-22 · Updated 2025-11-29 · CVE-2021-46310

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions djvulibre version 3.5.28

Description The issue is related to a lack of check for division by zero in the IW44Image.cpp component of the djvulibre library, which allows attackers to cause a denial of service. This can be exploited by a remote attacker to disrupt service.

Recommendations For djvulibre version 3.5.28, consider applying a patch or updating to a newer version that fixes the issue in IW44Image.cpp to prevent division by zero errors. As a temporary workaround, consider restricting access to the IW44Image.cpp component until a patch is available.

Exploit

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2025-12685

ALT-PU-2025-12687

BDU:2023-05879

CVE-2021-46310

DLA-4247-1

MGASA-2024-0183

OESA-2023-1641

OPENSUSE-SU-2023_3520-1

OPENSUSE-SU-2024:13178-1

ROSA-SA-2024-2428

SUSE-SU-2023:3520-1

SUSE-SU-2023:3755-1

SUSE-SU-2023_3520-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Suse

Djvulibre

References · 44

• 🔥 https://sourceforge.net/p/djvu/bugs/345 · Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2021-46310 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46310 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0183 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-46310 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0183.html · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46310 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46310 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-46310 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:3520-1 · Vendor Advisory