Skip to content
OpenAdvisories
Unscored CVE-2021-46310 EUVD-2021-32999GHSA-8v9r-5752-3c33

An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

Published Aug 22, 2023 · Updated Nov 4, 2025 · Assigned by mitre

Package: djvulibre Ecosystem: Debian

Description

An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 djvulibre 3.5.28-2.2 —
Debian 13 djvulibre 3.5.28-2.2 —
Debian 12 djvulibre 3.5.28-2.2~deb12u1 —
Debian 11 djvulibre 3.5.28-2.2~deb11u1 DLA-4247-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 djvulibre 3.5.27-150200.11.14.1 SUSE-SU-2023:3520-1
SLES 15 SP4 djvulibre 3.5.27-150200.11.14.1 SUSE-SU-2023:3520-1
SLES 12 SP5 djvulibre 3.5.25.3-5.22.1 SUSE-SU-2023:3755-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP5 djvulibre 3.5.25.3-5.22.1 SUSE-SU-2023:3755-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed djvulibre 3.5.28-6.1 openSUSE-SU-2024:13178-1
openSUSE Leap 15.5 djvulibre 3.5.27-150200.11.14.1 SUSE-SU-2023:3520-1
openSUSE Leap 15.4 djvulibre 3.5.27-150200.11.14.1 SUSE-SU-2023:3520-1

Advisories 4

References