Lucene search

MitreCVE-2021-36691

HistoryAug 30, 2021 - 8:15 p.m.

CVE-2021-36691

2021-08-3020:15:07

CWE-617

mitre

web.nvd.nist.gov

cve-2021-36691

libjxl

assertion failed

image.cc

planebase

denial of service

gif file

cjxl

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

40.6%

JSON

libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file using cjxl, an attacker can trigger a denial of service.

Affected configurations

Nvd

Node

libjxl_projectlibjxlMatch0.5.0

VendorProductVersionCPE
libjxl_projectlibjxl0.5.0cpe:2.3:a:libjxl_project:libjxl:0.5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libjxl_project	libjxl	0.5.0	cpe:2.3:a:libjxl_project:libjxl:0.5.0:::::::*

References

github.com/libjxl/libjxl/issues/422

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

40.6%

JSON

Related for CVE-2021-36691