CVE-2021-4216

Upstream information

CVE-2021-4216 at MITRE

Description

A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v3 Scores

	National Vulnerability Database
Base Score	5.5
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	High
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1202858 [IN_PROGRESS]

SUSE Security Advisories:

• openSUSE-SU-2022:10125-1, published Sat Sep 17 22:44:57 2022
• openSUSE-SU-2022:10126-1, published Sun Sep 18 00:44:54 2022

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Package Hub 15 SP3	mupdf >= 1.12.0-bp153.2.6.1 mupdf-devel-static >= 1.12.0-bp153.2.6.1	Patchnames: openSUSE-2022-10125
SUSE Package Hub 15 SP4	mupdf >= 1.20.3-bp154.2.3.1 mupdf-devel-static >= 1.20.3-bp154.2.3.1	Patchnames: openSUSE-2022-10126
openSUSE Leap 15.3	mupdf >= 1.12.0-bp153.2.6.1 mupdf-devel-static >= 1.12.0-bp153.2.6.1	Patchnames: openSUSE-2022-10125
openSUSE Leap 15.4	mupdf >= 1.20.3-bp154.2.3.1 mupdf-devel-static >= 1.20.3-bp154.2.3.1	Patchnames: openSUSE-2022-10126
openSUSE Tumbleweed	mupdf >= 1.20.3-2.1 mupdf-devel-static >= 1.20.3-2.1	Patchnames: openSUSE-Tumbleweed-2024-12326

---

SUSE Timeline for this CVE

CVE page created: Fri Aug 26 22:02:07 2022
CVE page last modified: Tue Sep 3 19:19:23 2024