Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-18804 (GCVE-0-2019-18804)
Vulnerability from cvelistv5
Published
2019-11-07 05:25
      Modified
2024-08-05 02:02
      
          Severity ?
        
        
          VLAI Severity ?
        
        
          EPSS score ?
        
        CWE
          - n/a
 
Summary
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
            
          
        References
          {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:02:39.495Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/p/djvu/bugs/309/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
          },
          {
            "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
          },
          {
            "name": "USN-4198-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4198-1/"
          },
          {
            "name": "FEDORA-2019-f923712bab",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
          },
          {
            "name": "FEDORA-2019-6bc8be9d84",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
          },
          {
            "name": "openSUSE-SU-2019:2574",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2019:2576",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
          },
          {
            "name": "FEDORA-2019-18cf104b5d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
          },
          {
            "name": "FEDORA-2019-7fac263417",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
          },
          {
            "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
          },
          {
            "name": "DSA-5032",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5032"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-28T22:06:13",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://sourceforge.net/p/djvu/bugs/309/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
        },
        {
          "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
        },
        {
          "name": "USN-4198-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4198-1/"
        },
        {
          "name": "FEDORA-2019-f923712bab",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
        },
        {
          "name": "FEDORA-2019-6bc8be9d84",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
        },
        {
          "name": "openSUSE-SU-2019:2574",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2019:2576",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
        },
        {
          "name": "FEDORA-2019-18cf104b5d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
        },
        {
          "name": "FEDORA-2019-7fac263417",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
        },
        {
          "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
        },
        {
          "name": "DSA-5032",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5032"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18804",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://sourceforge.net/p/djvu/bugs/309/",
              "refsource": "MISC",
              "url": "https://sourceforge.net/p/djvu/bugs/309/"
            },
            {
              "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md",
              "refsource": "MISC",
              "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
            },
            {
              "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
            },
            {
              "name": "USN-4198-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4198-1/"
            },
            {
              "name": "FEDORA-2019-f923712bab",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
            },
            {
              "name": "FEDORA-2019-6bc8be9d84",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
            },
            {
              "name": "openSUSE-SU-2019:2574",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2019:2576",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
            },
            {
              "name": "FEDORA-2019-18cf104b5d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
            },
            {
              "name": "FEDORA-2019-7fac263417",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
            },
            {
              "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
            },
            {
              "name": "DSA-5032",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-5032"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18804",
    "datePublished": "2019-11-07T05:25:46",
    "dateReserved": "2019-11-07T00:00:00",
    "dateUpdated": "2024-08-05T02:02:39.495Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-18804\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-11-07T06:15:10.653\",\"lastModified\":\"2024-11-21T04:33:36.020\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.\"},{\"lang\":\"es\",\"value\":\"DjVuLibre versi\u00f3n 3.5.27, presenta una desreferencia del puntero NULL en la funci\u00f3n DJVU::filter_fv en el archivo IW44EncodeCodec.cpp.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6174AF9B-0B0B-4602-A693-A775A541276B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A31C8344-3E02-4EB8-8BD8-4C84B7959624\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://sourceforge.net/p/djvu/bugs/309/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4198-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5032\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://sourceforge.net/p/djvu/bugs/309/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4198-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
  }
}
  opensuse-su-2019:2574-1
Vulnerability from csaf_opensuse
Published
2019-11-26 23:22
    Modified
2019-11-26 23:22
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed: 
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)
This update was imported from the SUSE:SLE-15:Update update project.
    Patchnames
openSUSE-2019-2574
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-2574",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2574-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:2574-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK/#QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:2574-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK/#QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154401",
        "url": "https://bugzilla.suse.com/1154401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156188",
        "url": "https://bugzilla.suse.com/1156188"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2019-11-26T23:22:22Z",
      "generator": {
        "date": "2019-11-26T23:22:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:2574-1",
      "initial_release_date": "2019-11-26T23:22:22Z",
      "revision_history": [
        {
          "date": "2019-11-26T23:22:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-lp150.2.6.1.i586",
                "product": {
                  "name": "djvulibre-3.5.27-lp150.2.6.1.i586",
                  "product_id": "djvulibre-3.5.27-lp150.2.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586",
                  "product_id": "djvulibre-doc-3.5.27-lp150.2.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
                  "product_id": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586",
                  "product_id": "libdjvulibre21-3.5.27-lp150.2.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64",
                "product": {
                  "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64",
                  "product_id": "djvulibre-3.5.27-lp150.2.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
                  "product_id": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64",
                  "product_id": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586"
        },
        "product_reference": "djvulibre-3.5.27-lp150.2.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64"
        },
        "product_reference": "djvulibre-3.5.27-lp150.2.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586"
        },
        "product_reference": "djvulibre-doc-3.5.27-lp150.2.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64"
        },
        "product_reference": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586"
        },
        "product_reference": "libdjvulibre21-3.5.27-lp150.2.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586",
          "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64",
          "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586",
          "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
          "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
          "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
          "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586",
          "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64",
            "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586",
            "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-26T23:22:22Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    }
  ]
}
  opensuse-su-2024:10719-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
    Modified
2024-06-15 00:00
    Summary
djvulibre-3.5.28-3.2 on GA media
    Notes
Title of the patch
djvulibre-3.5.28-3.2 on GA media
    Description of the patch
These are all security issues fixed in the djvulibre-3.5.28-3.2 package on the GA media of openSUSE Tumbleweed.
    Patchnames
openSUSE-Tumbleweed-2024-10719
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "djvulibre-3.5.28-3.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the djvulibre-3.5.28-3.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10719",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10719-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15142 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15143 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15144 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15144/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15145 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15145/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32490 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32491 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32491/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32492 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32493 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3500 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3500/"
      }
    ],
    "title": "djvulibre-3.5.28-3.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10719-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.28-3.2.aarch64",
                "product": {
                  "name": "djvulibre-3.5.28-3.2.aarch64",
                  "product_id": "djvulibre-3.5.28-3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.28-3.2.aarch64",
                "product": {
                  "name": "djvulibre-doc-3.5.28-3.2.aarch64",
                  "product_id": "djvulibre-doc-3.5.28-3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.28-3.2.aarch64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.28-3.2.aarch64",
                  "product_id": "libdjvulibre-devel-3.5.28-3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.28-3.2.aarch64",
                "product": {
                  "name": "libdjvulibre21-3.5.28-3.2.aarch64",
                  "product_id": "libdjvulibre21-3.5.28-3.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.28-3.2.ppc64le",
                "product": {
                  "name": "djvulibre-3.5.28-3.2.ppc64le",
                  "product_id": "djvulibre-3.5.28-3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.28-3.2.ppc64le",
                "product": {
                  "name": "djvulibre-doc-3.5.28-3.2.ppc64le",
                  "product_id": "djvulibre-doc-3.5.28-3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le",
                "product": {
                  "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le",
                  "product_id": "libdjvulibre-devel-3.5.28-3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.28-3.2.ppc64le",
                "product": {
                  "name": "libdjvulibre21-3.5.28-3.2.ppc64le",
                  "product_id": "libdjvulibre21-3.5.28-3.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.28-3.2.s390x",
                "product": {
                  "name": "djvulibre-3.5.28-3.2.s390x",
                  "product_id": "djvulibre-3.5.28-3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.28-3.2.s390x",
                "product": {
                  "name": "djvulibre-doc-3.5.28-3.2.s390x",
                  "product_id": "djvulibre-doc-3.5.28-3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.28-3.2.s390x",
                "product": {
                  "name": "libdjvulibre-devel-3.5.28-3.2.s390x",
                  "product_id": "libdjvulibre-devel-3.5.28-3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.28-3.2.s390x",
                "product": {
                  "name": "libdjvulibre21-3.5.28-3.2.s390x",
                  "product_id": "libdjvulibre21-3.5.28-3.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.28-3.2.x86_64",
                "product": {
                  "name": "djvulibre-3.5.28-3.2.x86_64",
                  "product_id": "djvulibre-3.5.28-3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.28-3.2.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.28-3.2.x86_64",
                  "product_id": "djvulibre-doc-3.5.28-3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.28-3.2.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.28-3.2.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.28-3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.28-3.2.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.28-3.2.x86_64",
                  "product_id": "libdjvulibre21-3.5.28-3.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64"
        },
        "product_reference": "djvulibre-3.5.28-3.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le"
        },
        "product_reference": "djvulibre-3.5.28-3.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.28-3.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x"
        },
        "product_reference": "djvulibre-3.5.28-3.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64"
        },
        "product_reference": "djvulibre-3.5.28-3.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64"
        },
        "product_reference": "djvulibre-doc-3.5.28-3.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le"
        },
        "product_reference": "djvulibre-doc-3.5.28-3.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.28-3.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x"
        },
        "product_reference": "djvulibre-doc-3.5.28-3.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64"
        },
        "product_reference": "djvulibre-doc-3.5.28-3.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.28-3.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.28-3.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.28-3.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.28-3.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.28-3.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.28-3.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.28-3.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.28-3.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.28-3.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.28-3.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-15142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15142",
          "url": "https://www.suse.com/security/cve/CVE-2019-15142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146702 for CVE-2019-15142",
          "url": "https://bugzilla.suse.com/1146702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15142"
    },
    {
      "cve": "CVE-2019-15143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15143",
          "url": "https://www.suse.com/security/cve/CVE-2019-15143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146569 for CVE-2019-15143",
          "url": "https://bugzilla.suse.com/1146569"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15143"
    },
    {
      "cve": "CVE-2019-15144",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15144"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate\u003cTYPE\u003e::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15144",
          "url": "https://www.suse.com/security/cve/CVE-2019-15144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146571 for CVE-2019-15144",
          "url": "https://bugzilla.suse.com/1146571"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15144"
    },
    {
      "cve": "CVE-2019-15145",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15145"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15145",
          "url": "https://www.suse.com/security/cve/CVE-2019-15145"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146572 for CVE-2019-15145",
          "url": "https://bugzilla.suse.com/1146572"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15145"
    },
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    },
    {
      "cve": "CVE-2021-32490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32490",
          "url": "https://www.suse.com/security/cve/CVE-2021-32490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185895 for CVE-2021-32490",
          "url": "https://bugzilla.suse.com/1185895"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32490"
    },
    {
      "cve": "CVE-2021-32491",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32491"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32491",
          "url": "https://www.suse.com/security/cve/CVE-2021-32491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185900 for CVE-2021-32491",
          "url": "https://bugzilla.suse.com/1185900"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32491"
    },
    {
      "cve": "CVE-2021-32492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32492",
          "url": "https://www.suse.com/security/cve/CVE-2021-32492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185904 for CVE-2021-32492",
          "url": "https://bugzilla.suse.com/1185904"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32492"
    },
    {
      "cve": "CVE-2021-32493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32493",
          "url": "https://www.suse.com/security/cve/CVE-2021-32493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185905 for CVE-2021-32493",
          "url": "https://bugzilla.suse.com/1185905"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32493"
    },
    {
      "cve": "CVE-2021-3500",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3500"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
          "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3500",
          "url": "https://www.suse.com/security/cve/CVE-2021-3500"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186253 for CVE-2021-3500",
          "url": "https://bugzilla.suse.com/1186253"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x",
            "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3500"
    }
  ]
}
  opensuse-su-2019:2576-1
Vulnerability from csaf_opensuse
Published
2019-11-27 05:20
    Modified
2019-11-27 05:20
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed: 
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)
This update was imported from the SUSE:SLE-15:Update update project.
    Patchnames
openSUSE-2019-2576
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-2576",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2576-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:2576-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z/#VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:2576-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z/#VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154401",
        "url": "https://bugzilla.suse.com/1154401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156188",
        "url": "https://bugzilla.suse.com/1156188"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2019-11-27T05:20:36Z",
      "generator": {
        "date": "2019-11-27T05:20:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:2576-1",
      "initial_release_date": "2019-11-27T05:20:36Z",
      "revision_history": [
        {
          "date": "2019-11-27T05:20:36Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-lp151.3.6.1.i586",
                "product": {
                  "name": "djvulibre-3.5.27-lp151.3.6.1.i586",
                  "product_id": "djvulibre-3.5.27-lp151.3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586",
                  "product_id": "djvulibre-doc-3.5.27-lp151.3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
                  "product_id": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586",
                  "product_id": "libdjvulibre21-3.5.27-lp151.3.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64",
                "product": {
                  "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64",
                  "product_id": "djvulibre-3.5.27-lp151.3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
                  "product_id": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64",
                  "product_id": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586"
        },
        "product_reference": "djvulibre-3.5.27-lp151.3.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64"
        },
        "product_reference": "djvulibre-3.5.27-lp151.3.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586"
        },
        "product_reference": "djvulibre-doc-3.5.27-lp151.3.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64"
        },
        "product_reference": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586"
        },
        "product_reference": "libdjvulibre21-3.5.27-lp151.3.6.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586",
          "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64",
          "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586",
          "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
          "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
          "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
          "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586",
          "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64",
            "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586",
            "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-27T05:20:36Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    }
  ]
}
  suse-su-2020:0970-1
Vulnerability from csaf_suse
Published
2020-04-09 10:50
    Modified
2020-04-09 10:50
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
	  
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
    Patchnames
SUSE-2020-970,SUSE-SLE-SDK-12-SP4-2020-970,SUSE-SLE-SDK-12-SP5-2020-970,SUSE-SLE-SERVER-12-SP4-2020-970,SUSE-SLE-SERVER-12-SP5-2020-970
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\t  \n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-970,SUSE-SLE-SDK-12-SP4-2020-970,SUSE-SLE-SDK-12-SP5-2020-970,SUSE-SLE-SERVER-12-SP4-2020-970,SUSE-SLE-SERVER-12-SP5-2020-970",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0970-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:0970-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200970-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:0970-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-April/006696.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156188",
        "url": "https://bugzilla.suse.com/1156188"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2020-04-09T10:50:08Z",
      "generator": {
        "date": "2020-04-09T10:50:08Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:0970-1",
      "initial_release_date": "2020-04-09T10:50:08Z",
      "revision_history": [
        {
          "date": "2020-04-09T10:50:08Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.aarch64",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.aarch64",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.aarch64",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.aarch64",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.i586",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.i586",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.i586",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.i586",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.i586",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.ppc64le",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.ppc64le",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.s390",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.s390",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.s390"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.s390",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.s390",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.s390",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.s390",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.s390x",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.s390x",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.s390x",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.s390x",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.6.10.x86_64",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.6.10.x86_64",
                  "product_id": "djvulibre-3.5.25.3-5.6.10.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.6.10.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.6.10.x86_64",
                  "product_id": "djvulibre-doc-3.5.25.3-5.6.10.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
                  "product_id": "libdjvulibre21-3.5.25.3-5.6.10.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-09T10:50:08Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    }
  ]
}
  suse-su-2019:3033-1
Vulnerability from csaf_suse
Published
2019-11-21 18:12
    Modified
2019-11-21 18:12
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed: 
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)
    Patchnames
SUSE-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3033
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3033",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3033-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:3033-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193033-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:3033-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006161.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154401",
        "url": "https://bugzilla.suse.com/1154401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156188",
        "url": "https://bugzilla.suse.com/1156188"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2019-11-21T18:12:35Z",
      "generator": {
        "date": "2019-11-21T18:12:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:3033-1",
      "initial_release_date": "2019-11-21T18:12:35Z",
      "revision_history": [
        {
          "date": "2019-11-21T18:12:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.aarch64",
                  "product_id": "djvulibre-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.aarch64",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.aarch64",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.i586",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.i586",
                  "product_id": "djvulibre-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.i586",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.i586",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.i586",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.ppc64le",
                  "product_id": "djvulibre-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.s390x",
                  "product_id": "djvulibre-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.s390x",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.s390x",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.x86_64",
                  "product_id": "djvulibre-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.x86_64",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.x86_64",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Desktop Applications 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Desktop Applications 15",
                  "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-desktop-applications:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-21T18:12:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    }
  ]
}
  suse-su-2021:1645-1
Vulnerability from csaf_suse
Published
2021-05-19 11:54
    Modified
2021-05-19 11:54
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
Security issues fixed:
- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
    Patchnames
HPE-Helion-OpenStack-8-2021-1645,SUSE-2021-1645,SUSE-OpenStack-Cloud-8-2021-1645,SUSE-OpenStack-Cloud-9-2021-1645,SUSE-OpenStack-Cloud-Crowbar-8-2021-1645,SUSE-OpenStack-Cloud-Crowbar-9-2021-1645,SUSE-SLE-SAP-12-SP3-2021-1645,SUSE-SLE-SAP-12-SP4-2021-1645,SUSE-SLE-SDK-12-SP5-2021-1645,SUSE-SLE-SERVER-12-SP2-BCL-2021-1645,SUSE-SLE-SERVER-12-SP3-2021-1645,SUSE-SLE-SERVER-12-SP3-BCL-2021-1645,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1645,SUSE-SLE-SERVER-12-SP5-2021-1645
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file\n- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file\n- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "HPE-Helion-OpenStack-8-2021-1645,SUSE-2021-1645,SUSE-OpenStack-Cloud-8-2021-1645,SUSE-OpenStack-Cloud-9-2021-1645,SUSE-OpenStack-Cloud-Crowbar-8-2021-1645,SUSE-OpenStack-Cloud-Crowbar-9-2021-1645,SUSE-SLE-SAP-12-SP3-2021-1645,SUSE-SLE-SAP-12-SP4-2021-1645,SUSE-SLE-SDK-12-SP5-2021-1645,SUSE-SLE-SERVER-12-SP2-BCL-2021-1645,SUSE-SLE-SERVER-12-SP3-2021-1645,SUSE-SLE-SERVER-12-SP3-BCL-2021-1645,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1645,SUSE-SLE-SERVER-12-SP5-2021-1645",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_1645-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:1645-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20211645-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:1645-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-May/008794.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185900",
        "url": "https://bugzilla.suse.com/1185900"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185904",
        "url": "https://bugzilla.suse.com/1185904"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185905",
        "url": "https://bugzilla.suse.com/1185905"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32491 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32491/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32492 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32493 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32493/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2021-05-19T11:54:30Z",
      "generator": {
        "date": "2021-05-19T11:54:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:1645-1",
      "initial_release_date": "2021-05-19T11:54:30Z",
      "revision_history": [
        {
          "date": "2021-05-19T11:54:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.aarch64",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.aarch64",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.aarch64",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.aarch64",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.i586",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.i586",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.i586",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.i586",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.i586",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.ppc64le",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.ppc64le",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.s390",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.s390",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.s390",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.s390",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.s390",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.s390",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.s390x",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.s390x",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.s390x",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.s390x",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
                  "product_id": "libdjvulibre21-3.5.25.3-5.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-3.5.25.3-5.9.1.x86_64",
                "product": {
                  "name": "djvulibre-3.5.25.3-5.9.1.x86_64",
                  "product_id": "djvulibre-3.5.25.3-5.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.25.3-5.9.1.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.25.3-5.9.1.x86_64",
                  "product_id": "djvulibre-doc-3.5.25.3-5.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HPE Helion OpenStack 8",
                "product": {
                  "name": "HPE Helion OpenStack 8",
                  "product_id": "HPE Helion OpenStack 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:hpe-helion-openstack:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 8",
                "product": {
                  "name": "SUSE OpenStack Cloud 8",
                  "product_id": "SUSE OpenStack Cloud 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 9",
                "product": {
                  "name": "SUSE OpenStack Cloud 9",
                  "product_id": "SUSE OpenStack Cloud 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 8",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 8",
                  "product_id": "SUSE OpenStack Cloud Crowbar 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 9",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 9",
                  "product_id": "SUSE OpenStack Cloud Crowbar 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
          "product_id": "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        },
        "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-05-19T11:54:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    },
    {
      "cve": "CVE-2021-32491",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32491"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32491",
          "url": "https://www.suse.com/security/cve/CVE-2021-32491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185900 for CVE-2021-32491",
          "url": "https://bugzilla.suse.com/1185900"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-05-19T11:54:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32491"
    },
    {
      "cve": "CVE-2021-32492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32492",
          "url": "https://www.suse.com/security/cve/CVE-2021-32492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185904 for CVE-2021-32492",
          "url": "https://bugzilla.suse.com/1185904"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-05-19T11:54:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32492"
    },
    {
      "cve": "CVE-2021-32493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32493",
          "url": "https://www.suse.com/security/cve/CVE-2021-32493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185905 for CVE-2021-32493",
          "url": "https://bugzilla.suse.com/1185905"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-05-19T11:54:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32493"
    }
  ]
}
  suse-su-2019:3033-2
Vulnerability from csaf_suse
Published
2020-07-07 11:41
    Modified
2020-07-07 11:41
    Summary
Security update for djvulibre
    Notes
Title of the patch
Security update for djvulibre
    Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed: 
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)
    Patchnames
SUSE-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1865
    Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
    {
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for djvulibre",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1865",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3033-2.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:3033-2",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193033-2/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:3033-2",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-July/007087.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154401",
        "url": "https://bugzilla.suse.com/1154401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156188",
        "url": "https://bugzilla.suse.com/1156188"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18804 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18804/"
      }
    ],
    "title": "Security update for djvulibre",
    "tracking": {
      "current_release_date": "2020-07-07T11:41:22Z",
      "generator": {
        "date": "2020-07-07T11:41:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:3033-2",
      "initial_release_date": "2020-07-07T11:41:22Z",
      "revision_history": [
        {
          "date": "2020-07-07T11:41:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.aarch64",
                  "product_id": "djvulibre-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.aarch64",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.aarch64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.aarch64",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.i586",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.i586",
                  "product_id": "djvulibre-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.i586",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.i586",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.i586",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.i586",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.i586",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.i586",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.ppc64le",
                  "product_id": "djvulibre-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.s390x",
                  "product_id": "djvulibre-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.s390x",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.s390x",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.s390x",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "djvulibre-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "djvulibre-3.5.27-3.8.1.x86_64",
                  "product_id": "djvulibre-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "djvulibre-doc-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "djvulibre-doc-3.5.27-3.8.1.x86_64",
                  "product_id": "djvulibre-doc-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64",
                  "product_id": "libdjvulibre-devel-3.5.27-3.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libdjvulibre21-3.5.27-3.8.1.x86_64",
                "product": {
                  "name": "libdjvulibre21-3.5.27-3.8.1.x86_64",
                  "product_id": "libdjvulibre21-3.5.27-3.8.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "djvulibre-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64"
        },
        "product_reference": "djvulibre-3.5.27-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18804",
          "url": "https://www.suse.com/security/cve/CVE-2019-18804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156188 for CVE-2019-18804",
          "url": "https://bugzilla.suse.com/1156188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-07T11:41:22Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18804"
    }
  ]
}
  fkie_cve-2019-18804
Vulnerability from fkie_nvd
Published
2019-11-07 06:15
    Modified
2024-11-21 04:33
    
          Severity ?
        
        
    Summary
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
    References
      | URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md | Exploit, Third Party Advisory | |
| cve@mitre.org | https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html | Mailing List, Third Party Advisory | |
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/ | ||
| cve@mitre.org | https://sourceforge.net/p/djvu/bugs/309/ | Exploit, Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/4198-1/ | Third Party Advisory | |
| cve@mitre.org | https://www.debian.org/security/2021/dsa-5032 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md | Exploit, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://sourceforge.net/p/djvu/bugs/309/ | Exploit, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4198-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.debian.org/security/2021/dsa-5032 | Third Party Advisory | 
Impacted products
      | Vendor | Product | Version | |
|---|---|---|---|
| djvulibre_project | djvulibre | 3.5.27 | |
| debian | debian_linux | 8.0 | |
| debian | debian_linux | 9.0 | |
| debian | debian_linux | 10.0 | |
| debian | debian_linux | 11.0 | |
| fedoraproject | fedora | 30 | |
| fedoraproject | fedora | 31 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| canonical | ubuntu_linux | 19.04 | |
| canonical | ubuntu_linux | 19.10 | |
| opensuse | leap | 15.0 | |
| opensuse | leap | 15.1 | 
{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "6174AF9B-0B0B-4602-A693-A775A541276B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
              "matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
              "matchCriteriaId": "80F0FA5D-8D3B-4C0E-81E2-87998286AF33",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp."
    },
    {
      "lang": "es",
      "value": "DjVuLibre versi\u00f3n 3.5.27, presenta una desreferencia del puntero NULL en la funci\u00f3n DJVU::filter_fv en el archivo IW44EncodeCodec.cpp."
    }
  ],
  "id": "CVE-2019-18804",
  "lastModified": "2024-11-21T04:33:36.020",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-11-07T06:15:10.653",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://sourceforge.net/p/djvu/bugs/309/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4198-1/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-5032"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://sourceforge.net/p/djvu/bugs/309/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4198-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-5032"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}
  ghsa-mgvj-94j9-x737
Vulnerability from github
Published
2022-05-24 17:00
    Modified
2022-05-24 17:00
    
        Severity ?
      
      
    
        VLAI Severity ?
      
      Details
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
{
  "affected": [],
  "aliases": [
    "CVE-2019-18804"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-476"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-11-07T06:15:00Z",
    "severity": "MODERATE"
  },
  "details": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
  "id": "GHSA-mgvj-94j9-x737",
  "modified": "2022-05-24T17:00:38Z",
  "published": "2022-05-24T17:00:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18804"
    },
    {
      "type": "WEB",
      "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF"
    },
    {
      "type": "WEB",
      "url": "https://sourceforge.net/p/djvu/bugs/309"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4198-1"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2021/dsa-5032"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}
  gsd-2019-18804
Vulnerability from gsd
Modified
2023-12-13 01:23
      Details
        
          DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
        
      Aliases
        
      Aliases
        
      {
  "GSD": {
    "alias": "CVE-2019-18804",
    "description": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
    "id": "GSD-2019-18804",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-18804.html",
      "https://www.debian.org/security/2021/dsa-5032",
      "https://ubuntu.com/security/CVE-2019-18804",
      "https://advisories.mageia.org/CVE-2019-18804.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-18804"
      ],
      "details": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.",
      "id": "GSD-2019-18804",
      "modified": "2023-12-13T01:23:50.431468Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2019-18804",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://sourceforge.net/p/djvu/bugs/309/",
            "refsource": "MISC",
            "url": "https://sourceforge.net/p/djvu/bugs/309/"
          },
          {
            "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md",
            "refsource": "MISC",
            "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
          },
          {
            "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
          },
          {
            "name": "USN-4198-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4198-1/"
          },
          {
            "name": "FEDORA-2019-f923712bab",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
          },
          {
            "name": "FEDORA-2019-6bc8be9d84",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
          },
          {
            "name": "openSUSE-SU-2019:2574",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2019:2576",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
          },
          {
            "name": "FEDORA-2019-18cf104b5d",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
          },
          {
            "name": "FEDORA-2019-7fac263417",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
          },
          {
            "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
          },
          {
            "name": "DSA-5032",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2021/dsa-5032"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18804"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory"
              ],
              "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md"
            },
            {
              "name": "https://sourceforge.net/p/djvu/bugs/309/",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory"
              ],
              "url": "https://sourceforge.net/p/djvu/bugs/309/"
            },
            {
              "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html"
            },
            {
              "name": "USN-4198-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/4198-1/"
            },
            {
              "name": "FEDORA-2019-f923712bab",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"
            },
            {
              "name": "FEDORA-2019-6bc8be9d84",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"
            },
            {
              "name": "openSUSE-SU-2019:2574",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2019:2576",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html"
            },
            {
              "name": "FEDORA-2019-18cf104b5d",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"
            },
            {
              "name": "FEDORA-2019-7fac263417",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"
            },
            {
              "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html"
            },
            {
              "name": "DSA-5032",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2021/dsa-5032"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-03-29T19:37Z",
      "publishedDate": "2019-11-07T06:15Z"
    }
  }
}
  Loading…
      Loading…
      Sightings
| Author | Source | Type | Date | 
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
 - Confirmed: The vulnerability is confirmed from an analyst perspective.
 - Published Proof of Concept: A public proof of concept is available for this vulnerability.
 - Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
 - Patched: This vulnerability was successfully patched by the user reporting the sighting.
 - Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
 - Not confirmed: The user expresses doubt about the veracity of the vulnerability.
 - Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
 
Loading…
      Loading…