PatchTheCVEminidjvu vulnerabilities and fixes
Recent CVEs affecting minidjvu, with upgrade or downgrade steps. 5 tracked.
minidjvu has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-08-17. Highest priority: CVE-2017-12443 (score 39/100).
- CVE-2017-12445 MEDIUM 6.5 DOWNGRADE The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of
- CVE-2017-12444 MEDIUM 6.5 DOWNGRADE The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (in
- CVE-2017-12443 MEDIUM 6.5 DOWNGRADE The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid me
- CVE-2017-12442 MEDIUM 6.5 DOWNGRADE The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory
- CVE-2017-12441 MEDIUM 6.5 DOWNGRADE The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory
FAQ
How do I fix minidjvu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is minidjvu being exploited right now?
None of the tracked minidjvu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which minidjvu CVE should I patch first?
CVE-2017-12443 currently ranks highest (39/100): The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid me.