NULL pointer dereference in DjVuLibre - CVE-2019-18804

Vulnerability identifier: #VU22901

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-18804

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the function DJVU::filter_fv at IW44EncodeCodec.cpp. A remote attacker can perform a denial of service (DoS) attack.

DjVuLibre
djvulibre (Debian package)
djvulibre (Ubuntu package)
libdjvulibre-devel
libdjvulibre21-debuginfo
libdjvulibre21
djvulibre-debuginfo
djvulibre-debugsource
mingw-djvulibre
djvulibre
djvulibre-help
djvulibre-devel
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
Opensuse
openEuler
Fedora

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

djvulibre (Debian package) - addressed in versions 3.5.27.1-10+deb10u1, 3.5.28-2
djvulibre (Ubuntu package) - addressed in versions 3.5.27.1-5ubuntu0.1, 3.5.27.1-8ubuntu0.1, 3.5.27.1-10ubuntu0.1, 3.5.27.1-13ubuntu0.1
libdjvulibre-devel - update to 3.5.25.3-5.9.1
libdjvulibre21-debuginfo - update to 3.5.25.3-5.9.1
libdjvulibre21 - update to 3.5.25.3-5.9.1
djvulibre-debuginfo - update to 3.5.25.3-5.9.1
djvulibre-debugsource - update to 3.5.25.3-5.9.1
mingw-djvulibre - addressed in versions 3.5.27-7.fc30, 3.5.27-7.fc31
djvulibre - update to 3.5.27-15
djvulibre-help - update to 3.5.27-15
djvulibre-devel - update to 3.5.27-15
djvulibre-debugsource - update to 3.5.27-15
djvulibre-debuginfo - update to 3.5.27-15
djvulibre - addressed in versions 3.5.27-15.fc29, 3.5.27-16.fc30, 3.5.27-17.fc31

• https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md
• https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html
• https://sourceforge.net/p/djvu/bugs/309/

• Multiple vulnerabilities in DjVuLibre
• Ubuntu update for DjVuLibre
• OpenSUSE Linux update for djvulibre
• OpenSUSE Linux update for djvulibre
• Debian update for djvulibre
• SUSE update for djvulibre
• openEuler update for djvulibre
• Fedora 30 update for mingw-djvulibre
• Fedora 31 update for mingw-djvulibre
• Fedora 31 update for djvulibre
• Fedora 29 update for djvulibre
• Fedora 30 update for djvulibre