CVE-2023-51105

2023-12-2615:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-51105

mupdf

vulnerability

bmp_decompress_rle4

load-bmp.c

unix

floating point exception

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.1%

JSON

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.

OSVersionArchitecturePackageVersionFilename
Debian12allmupdf<= 1.21.1+ds2-1mupdf_1.21.1+ds2-1_all.deb
Debian11allmupdf<= 1.17.0+ds1-2mupdf_1.17.0+ds1-2_all.deb
Debian999allmupdf<= 1.24.8+ds2-2mupdf_1.24.8+ds2-2_all.deb
Debian13allmupdf<= 1.24.8+ds2-2mupdf_1.24.8+ds2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mupdf	<= 1.21.1+ds2-1	mupdf_1.21.1+ds2-1_all.deb
Debian	11	all	mupdf	<= 1.17.0+ds1-2	mupdf_1.17.0+ds1-2_all.deb
Debian	999	all	mupdf	<= 1.24.8+ds2-2	mupdf_1.24.8+ds2-2_all.deb
Debian	13	all	mupdf	<= 1.24.8+ds2-2	mupdf_1.24.8+ds2-2_all.deb