OESA-2021-1034 djvulibre security update

🗓️ 07 Feb 2021 11:02:36Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

DjVuLibre 3.5.27 fixes crashes, denial of service, and memory errors in multiple components.

Reporter	Title	Published	Views	Family All 160
ATTACKERKB	CVE-2019-15142: DjVuLibre Out-of-Bound Read Vulnerability	13 Feb 202000:00	–	attackerkb
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the DJVU::filter_fv function at IW44EncodeCodec.cpp in the DjVuLibre library and utilities set allows a hacker to trigger a service failure.	29 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVU files by DjVuLibre allows a hacker to cause a service failure by exploiting the issue related to buffer overflows.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.	2 Nov 202100:00	–	bdu_fstec

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-18804
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-15145
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-15142
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-15143
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-15144

03 Sep 2025 06:16Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

CVSS 3.17.5

EPSS0.04581

null pointer out of bounds heap overread infinite loop uncontrolled recursion denial of service