DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984779 advisory.

    DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images.
    Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability,     because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can     lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds     read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images.
    Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability,     because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can     lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds     read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.
    (CVE-2025-53367)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02695-1 advisory.

    - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. (bsc#1245773)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02703-1 advisory.

    - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. (bsc#1245773)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2025-010 advisory.

    DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images.
    Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability,     because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can     lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds     read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.
    (CVE-2025-53367)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4247 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4247-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     July 21, 2025                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : djvulibre     Version        : 3.5.28-2.2~deb11u1     CVE ID         : CVE-2021-46310 CVE-2021-46312 CVE-2025-53367     Debian Bug     : 1052668 1052669 1108729

    Multiple vulnerabilities have been fixed in DjVuLibre,     a library and tools to handle documents in the DjVu format.

    CVE-2021-46310

        Divide by zero in IW44Image::Map::image()

    CVE-2021-46312

        Divide by zero in IWBitmap::Encode::init()

    CVE-2025-53367

        Buffer overflow in MMRDecoder

    For Debian 11 bullseye, these problems have been fixed in version     3.5.28-2.2~deb11u1.

    We recommend that you upgrade your djvulibre packages.

    For the detailed security status of djvulibre please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/djvulibre

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e286662e59 advisory.

    Update to 3.5.29, fixes CVE-2025-53367.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0f35c5dbbb advisory.

    Update to 3.5.29, fixes CVE-2025-53367.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7631-1 advisory.

    It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated     system were tricked into processing a specially crafted DjVu file, a remote attacker could cause     applications to stop responding or crash, resulting in a denial of service, or possibly execute arbitrary     code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5960 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5960-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 07, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : djvulibre     CVE ID         : CVE-2025-53367     Debian Bug     : 1108729

    Antonio Morales discovered an out-of-bounds write in the     MMRDecoder::scanruns method in djvulibre, a library and set of tools to     handle documents in the DjVu format, which may result in the execution     of arbitrary code if a specially crafted document is processed.

    For the stable distribution (bookworm), this problem has been fixed in     version 3.5.28-2.1~deb12u1.

    We recommend that you upgrade your djvulibre packages.

    For the detailed security status of djvulibre please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/djvulibre

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
267395	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2025-984779)	Nessus	Unity Linux Local Security Checks	high
248107	Linux Distros Unpatched Vulnerability : CVE-2025-53367	Nessus	Misc.	high
243946	SUSE SLES12 Security Update : djvulibre (SUSE-SU-2025:02695-1)	Nessus	SuSE Local Security Checks	high
243937	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : djvulibre (SUSE-SU-2025:02703-1)	Nessus	SuSE Local Security Checks	high
243197	Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2025-010)	Nessus	Amazon Linux Local Security Checks	high
242475	Debian dla-4247 : djview - security update	Nessus	Debian Local Security Checks	high
242075	Fedora 42 : mingw-djvulibre (2025-e286662e59)	Nessus	Fedora Local Security Checks	high
242049	Fedora 41 : mingw-djvulibre (2025-0f35c5dbbb)	Nessus	Fedora Local Security Checks	high
241683	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : DjVuLibre vulnerability (USN-7631-1)	Nessus	Ubuntu Local Security Checks	high
241492	Debian dsa-5960 : djview - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2025-53367

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high