Lucene search

RedhatCVE-2021-4216

HistoryAug 26, 2022 - 4:15 p.m.

CVE-2021-4216

2022-08-2616:15:09

CWE-369

redhat

web.nvd.nist.gov

cve-2021-4216

mupdf

division-by-zero

muraster.c

security

vulnerability

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

12.6%

JSON

A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream.

Affected configurations

Nvd

Vulners

Node

artifexmupdfRange<1.20.0

VendorProductVersionCPE
artifexmupdf*cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
artifex	mupdf	*	cpe:2.3:a:artifex:mupdf::::::::

CNA Affected

[
  {
    "product": "mupdf",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v1.20.0-rc1"
      }
    ]
  }
]

References

bugs.ghostscript.com/show_bug.cgi?id=704834

github.com/ArtifexSoftware/mupdf/commit/22c47acbd52949421f8c7cb46ea1556827d0fcbf

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-4216