CVE-2023-51106

2023-12-2615:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-51106

mupdf

divide-by-zero

vulnerability

pnm_binary_read_image

function

load-pnm.c

fz_colorspace_n

unix} .

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.

OSVersionArchitecturePackageVersionFilename
Debian12allmupdf<= 1.21.1+ds2-1mupdf_1.21.1+ds2-1_all.deb
Debian11allmupdf<= 1.17.0+ds1-2mupdf_1.17.0+ds1-2_all.deb
Debian999allmupdf<= 1.24.8+ds2-2mupdf_1.24.8+ds2-2_all.deb
Debian13allmupdf<= 1.24.8+ds2-2mupdf_1.24.8+ds2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mupdf	<= 1.21.1+ds2-1	mupdf_1.21.1+ds2-1_all.deb
Debian	11	all	mupdf	<= 1.17.0+ds1-2	mupdf_1.17.0+ds1-2_all.deb
Debian	999	all	mupdf	<= 1.24.8+ds2-2	mupdf_1.24.8+ds2-2_all.deb
Debian	13	all	mupdf	<= 1.24.8+ds2-2	mupdf_1.24.8+ds2-2_all.deb