Vulnerability Name:

CVE-2021-3630 (CCN-204700)

Assigned:2021-06-29
Published:2021-06-29
Updated:2022-12-21
Summary:
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2021-3630

Source: CCN
Type: DjVuLibre GIT Repository
DjVuLibre

Source: CCN
Type: Red Hat Bugzilla – Bug 1977427
(CVE-2021-3630) - CVE-2021-3630 djvulibre: out-of-bounds write in DJVU::DjVuTXT::decode() in DjVuText.cpp

Source: patrick@puiterwijk.org
Type: Issue Tracking, Patch, Third Party Advisory
patrick@puiterwijk.org

Source: XF
Type: UNKNOWN
djvulibre-cve20213630-dos(204700)

Source: patrick@puiterwijk.org
Type: Mailing List, Third Party Advisory
patrick@puiterwijk.org

Source: patrick@puiterwijk.org
Type: Mailing List, Third Party Advisory
patrick@puiterwijk.org

Source: patrick@puiterwijk.org
Type: Mailing List, Third Party Advisory
patrick@puiterwijk.org

Source: patrick@puiterwijk.org
Type: Mailing List, Third Party Advisory
patrick@puiterwijk.org

Source: patrick@puiterwijk.org
Type: Mailing List, Third Party Advisory
patrick@puiterwijk.org

Source: patrick@puiterwijk.org
Type: Third Party Advisory
patrick@puiterwijk.org

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2021-3630

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:7927
    P
    libdjvulibre-devel-3.5.27-11.11.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7432
    P
    apache-commons-httpclient-3.1-11.3.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7476
    P
    curl-8.0.1-150400.5.23.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:51935
    P
    Security update for libksba (Critical)
    2022-10-21
    oval:org.opensuse.security:def:95343
    P
    Security update for python-ujson (Moderate)
    2022-08-04
    oval:org.opensuse.security:def:6122
    P
    Security update for samba (Important)
    2022-07-29
    oval:org.opensuse.security:def:3307
    P
    ntp-4.2.8p13-85.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:94937
    P
    libdjvulibre-devel-3.5.27-11.11.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94790
    P
    python-rtslib-fb-common-2.1.74-1.29 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:100032
    P
    (Moderate)
    2021-12-16
    oval:org.opensuse.security:def:93276
    P
    (Important)
    2021-12-06
    oval:org.opensuse.security:def:101503
    P
    Security update for apache2 (Important)
    2021-09-03
    oval:org.opensuse.security:def:92970
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:10324
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:70279
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:8641
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:92374
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:9574
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:69525
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:99523
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:93123
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:70464
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:8826
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:98937
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:92573
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:9773
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:69714
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:99722
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:91987
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:9021
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:99132
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:92772
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:10139
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:69913
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:92182
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:9385
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:99324
    P
    Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:110996
    P
    Security update for djvulibre (Important)
    2021-08-10
    oval:org.opensuse.security:def:102056
    P
    Security update for php7 (Important)
    2021-08-06
    oval:org.opensuse.security:def:32160
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:55932
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:83316
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:23947
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:66884
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:89431
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:34499
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:57983
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:85706
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:30229
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:51630
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:125580
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:76279
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:102055
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:109236
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:60322
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:88167
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:32974
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:56052
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:83436
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:26100
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:5087
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:74302
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:111654
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:67211
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:4145
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:58797
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:86127
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:31242
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:95857
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:126749
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:1475
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:65234
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:88481
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:33695
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:57065
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:84189
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:29405
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:117683
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:74367
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:102570
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:108169
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:68521
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:4210
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:59518
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:86624
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:31663
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:55228
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:82612
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:127146
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:23642
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:65299
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:89173
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:33953
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:57486
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:84647
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:30109
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:118321
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:75952
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:101714
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:108722
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:68565
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:5795
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:59776
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:87438
    P
    Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:44552
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:38823
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:41271
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:43253
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:38125
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:45701
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:40122
    P
    Security update for djvulibre (Important)
    2021-08-04
    oval:org.opensuse.security:def:44551
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:38822
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:41270
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:43252
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:38124
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:45700
    P
    Security update for djvulibre (Important)
    2021-07-02
    oval:org.opensuse.security:def:40121
    P
    Security update for djvulibre (Important)
    2021-07-02
    BACK
    djvulibre_project djvulibre 3.5.27