495 matches found
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680660)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680660 advisory. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680663)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680663 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash an...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680669)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680669 advisory. In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680671)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680671 advisory. DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack application crash via an out-of- bounds read by crafting a corrupted JB2 image file that is...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680672)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680672 advisory. DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filterfv at IW44EncodeCodec.cpp. Tenable has extracted the preceding description block directly...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680665)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680665 advisory. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680668 advisory. In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loo...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680662)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680662 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and...
Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680664)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680664 advisory. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and...
EUVD-2025-19908
Malicious code in bioql PyPI...
EUVD-2021-33001
Malicious code in bioql PyPI...
EUVD-2021-32999
Malicious code in bioql PyPI...
ROS-20250904-09
Vulnerability in the IW44Image.cpp component of the library for viewing, creating, editing DjVu files DjVuLibre is related to errors of bounds checking when processing unreliable input data in method MMRDecoder::scanruns method. Exploitation of the vulnerability could allow an attacker acting...
Linux Distros Unpatched Vulnerability : CVE-2021-46310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. CVE-2021-46310 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2025-53367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method ...
Linux Distros Unpatched Vulnerability : CVE-2021-46312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. CVE-2021-46312 Note that...
openSUSE Security Advisory (SUSE-SU-2025:02703-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : djvulibre (SUSE-SU-2025:02695-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02695-1 advisory. - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773 Tenable has extracted the preceding description...
Security update for djvulibre
This update for djvulibre fixes the following issues: CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
