The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-891c09df97 advisory.

    Security fix for CVE-2021-46310 and CVE-2021-46312.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e8b9bedd36 advisory.

    Security fix for CVE-2021-46310 and CVE-2021-46312.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of     service via divide by zero. (CVE-2021-46312)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8054-1 advisory.

    It was discovered that DjVuLibre could be forced to execute a division by zero in certain instances. A     remote attacker could possibly use this issue to cause applications to stop responding or crash, resulting     in a denial of service. (CVE-2021-46312)

    It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated     system were tricked into processing a specially crafted DjVu file, a remote attacker could cause     applications to stop responding or crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-53367)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3755-1 advisory.

  - A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via     crafted djvu file may lead to application crash and other consequences. (CVE-2021-32490)

  - An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service     via divide by zero. (CVE-2021-46310)

  - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of     service via divide by zero. (CVE-2021-46312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2024-005 advisory.

    An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of     service via divide by zero. (CVE-2021-46312)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d20163632f advisory.

    Security fix for CVE-2021-46310 and CVE-2021-46312.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4247 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4247-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     July 21, 2025                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : djvulibre     Version        : 3.5.28-2.2~deb11u1     CVE ID         : CVE-2021-46310 CVE-2021-46312 CVE-2025-53367     Debian Bug     : 1052668 1052669 1108729

    Multiple vulnerabilities have been fixed in DjVuLibre,     a library and tools to handle documents in the DjVu format.

    CVE-2021-46310

        Divide by zero in IW44Image::Map::image()

    CVE-2021-46312

        Divide by zero in IWBitmap::Encode::init()

    CVE-2025-53367

        Buffer overflow in MMRDecoder

    For Debian 11 bullseye, these problems have been fixed in version     3.5.28-2.2~deb11u1.

    We recommend that you upgrade your djvulibre packages.

    For the detailed security status of djvulibre please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/djvulibre

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3520-1 advisory.

  - An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service     via divide by zero. (CVE-2021-46310)

  - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of     service via divide by zero. (CVE-2021-46312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
197164	Fedora 39 : djvulibre (2024-891c09df97)	Nessus	Fedora Local Security Checks	5/16/2024	11/14/2024	medium
197165	Fedora 38 : djvulibre (2024-e8b9bedd36)	Nessus	Fedora Local Security Checks	5/16/2024	11/14/2024	medium
245708	Linux Distros Unpatched Vulnerability : CVE-2021-46312	Nessus	Misc.	8/8/2025	2/23/2026	medium
299810	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : DjVuLibre vulnerabilities (USN-8054-1)	Nessus	Ubuntu Local Security Checks	2/23/2026	2/23/2026	high
181870	SUSE SLES12 Security Update : djvulibre (SUSE-SU-2023:3755-1)	Nessus	SuSE Local Security Checks	9/26/2023	9/26/2023	high
187772	Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2024-005)	Nessus	Amazon Linux Local Security Checks	1/9/2024	12/11/2024	medium
197166	Fedora 40 : djvulibre (2024-d20163632f)	Nessus	Fedora Local Security Checks	5/16/2024	11/14/2024	medium
242475	Debian dla-4247 : djview - security update	Nessus	Debian Local Security Checks	7/21/2025	7/21/2025	high
180541	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : djvulibre (SUSE-SU-2023:3520-1)	Nessus	SuSE Local Security Checks	9/6/2023	9/7/2023	medium

Detections

Analytics

Plugins Search

medium

medium

medium

high

high

medium

medium

high

medium