CVE-2019-18804: djvulibre project djvulibre – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2019-18804

ALTO 7.5CVE-2019-18804 · Published 07/11/2019 · updated 17/06/2026

En resumen

CVE-2019-18804 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a djvulibre (djvulibre project).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.7%, mayor que el 89.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
djvulibre djvulibre_project	`= 3.5.27`	No fix yet

Description

DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.

References

lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html · Mailing List
TeamSeri0us/pocs · Exploit
lists.debian.org/debian-lts-announce/2019/11/msg00004.html · Mailing List
lists.debian.org/debian-lts-announce/2021/05/msg00022.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF
sourceforge.net/p/djvu/bugs/309 · Exploit
usn.ubuntu.com/4198-1 · Third Party Advisory
debian.org/security/2021/dsa-5032 · Third Party Advisory

Más vulnerabilidades de djvulibre

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free