CVE catalog

CVE-2021-3630

djvulibre: CVE-2021-3630

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.01% · Oct 25, 2026

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandjvulibresid3.5.30.1-1fixed
Debiandjvulibreforky3.5.30-1fixed
Debiandjvulibretrixie3.5.28-2.2fixed
Debiandjvulibrebookworm3.5.28-2.2~deb12u1fixed
Debiandjvulibrebookworm-security3.5.28-2.1~deb12u1fixed
Ubuntudjvulibrepro3.5.27.1-3vulnerable
Ubuntudjvulibrepro3.5.27.1-4vulnerable
Ubuntudjvulibrepro3.5.27.1-5vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1+esm1vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1+esm2fixed
Ubuntudjvulibre18.043.5.27.1-7vulnerable
Ubuntudjvulibre18.043.5.27.1-8vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.1vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.2vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.3vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.4fixed
Ubuntudjvulibrepro3.5.27.1-3vulnerable
Ubuntudjvulibrepro3.5.27.1-4vulnerable
Ubuntudjvulibrepro3.5.27.1-5vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1+esm1vulnerable
Ubuntudjvulibrepro3.5.27.1-5ubuntu0.1+esm2fixed
Ubuntudjvulibre18.043.5.27.1-7vulnerable
Ubuntudjvulibre18.043.5.27.1-8vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.1vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.2vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.3vulnerable
Ubuntudjvulibre18.043.5.27.1-8ubuntu0.4fixed
Susedjvulibrelinux enterprise point of sale 11 sp33.5.21-3.18.1fixed
Susedjvulibrelinux enterprise server 11 sp4-ltss3.5.21-3.18.1fixed
Opensusedjvulibreleap 15.33.5.27-11.11.1fixed
Opensusedjvulibreleap 15.23.5.27-lp152.7.9.1fixed
Susedjvulibrelinux enterprise point of sale 11 sp33.5.21-3.15.1fixed
Susedjvulibrelinux enterprise server 11 sp4-ltss3.5.21-3.15.1fixed
Susedjvulibrelinux enterprise high performance computing 15-espos3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise high performance computing 15-ltss3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise high performance computing 15 sp1-espos3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise high performance computing 15 sp1-ltss3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise server 15-ltss3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise server 15 sp1-bcl3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise server 15 sp1-ltss3.5.27-3.19.1fixed
Susedjvulibrelinux enterprise server for sap applications 153.5.27-3.19.1fixed
Susedjvulibrelinux enterprise server for sap applications 15 sp13.5.27-3.19.1fixed
Susedjvulibremanager proxy 4.03.5.27-3.19.1fixed
Susedjvulibremanager retail branch server 4.03.5.27-3.19.1fixed
Susedjvulibremanager server 4.03.5.27-3.19.1fixed
Susedjvulibreenterprise storage 63.5.27-3.19.1fixed
Susedjvulibrehpe helion openstack 83.5.25.3-5.19.2fixed
Susedjvulibreopenstack cloud 83.5.25.3-5.19.2fixed
Susedjvulibreopenstack cloud 93.5.25.3-5.19.2fixed
Susedjvulibreopenstack cloud crowbar 83.5.25.3-5.19.2fixed
Susedjvulibreopenstack cloud crowbar 93.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server for sap applications 12 sp33.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server for sap applications 12 sp43.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise software development kit 12 sp53.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server 12 sp2-bcl3.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server 12 sp3-ltss3.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server 12 sp3-bcl3.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server 12 sp4-ltss3.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server 12 sp53.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise server for sap applications 12 sp53.5.25.3-5.19.2fixed
Susedjvulibrelinux enterprise module for desktop applications 15 sp23.5.27-11.11.1fixed
Susedjvulibrelinux enterprise module for desktop applications 15 sp33.5.27-11.11.1fixed
Susedjvulibrelinux enterprise module for package hub 15 sp23.5.27-11.11.1fixed
Susedjvulibrelinux enterprise module for package hub 15 sp33.5.27-11.11.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandjvulibresourcesid3.5.27.1-12not yet assignedNot reportedNot reported
Debiandjvulibresourceforky3.5.27.1-12not yet assignedNot reportedNot reported
Debiandjvulibresourcetrixie3.5.27.1-12not yet assignedNot reportedNot reported
Debiandjvulibresourcebookworm3.5.27.1-12not yet assignedNot reportedNot reported
Ubuntudjvulibredebpro3.5.27.1-5ubuntu0.1+esm2Not reportedUSN-5005-1Not reported
Ubuntudjvulibredeb18.043.5.27.1-8ubuntu0.4Not reportedUSN-5005-1Not reported
Ubuntudjvulibredebpro3.5.27.1-5ubuntu0.1+esm2Not reportedUBUNTU-CVE-2021-3630Not reported
Ubuntudjvulibredeb18.043.5.27.1-8ubuntu0.4Not reportedUBUNTU-CVE-2021-3630Not reported
Susedjvulibrerpmlinux enterprise point of sale 11 sp33.5.21-3.18.1Not reportedSUSE-SU-2021:14773-1Not reported
Susedjvulibrerpmlinux enterprise server 11 sp4-ltss3.5.21-3.18.1Not reportedSUSE-SU-2021:14773-1Not reported
Opensusedjvulibrerpmleap 15.33.5.27-11.11.1Not reportedOPENSUSE-SU-2021:2619-1Not reported
Opensusedjvulibrerpmleap 15.23.5.27-lp152.7.9.1Not reportedOPENSUSE-SU-2021:1112-1Not reported
Susedjvulibrerpmlinux enterprise point of sale 11 sp33.5.21-3.15.1Not reportedSUSE-SU-2021:14761-1Not reported
Susedjvulibrerpmlinux enterprise server 11 sp4-ltss3.5.21-3.15.1Not reportedSUSE-SU-2021:14761-1Not reported
Susedjvulibrerpmlinux enterprise high performance computing 15-espos3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise high performance computing 15-ltss3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise high performance computing 15 sp1-espos3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise high performance computing 15 sp1-ltss3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise server 15-ltss3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise server 15 sp1-bcl3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise server 15 sp1-ltss3.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise server for sap applications 153.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmlinux enterprise server for sap applications 15 sp13.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmmanager proxy 4.03.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmmanager retail branch server 4.03.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmmanager server 4.03.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmenterprise storage 63.5.27-3.19.1Not reportedSUSE-SU-2021:2796-1Not reported
Susedjvulibrerpmhpe helion openstack 83.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmopenstack cloud 83.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmopenstack cloud 93.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmopenstack cloud crowbar 83.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmopenstack cloud crowbar 93.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server for sap applications 12 sp33.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server for sap applications 12 sp43.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise software development kit 12 sp53.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server 12 sp2-bcl3.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server 12 sp3-ltss3.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server 12 sp3-bcl3.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server 12 sp4-ltss3.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server 12 sp53.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise server for sap applications 12 sp53.5.25.3-5.19.2Not reportedSUSE-SU-2021:2621-1Not reported
Susedjvulibrerpmlinux enterprise module for desktop applications 15 sp23.5.27-11.11.1Not reportedSUSE-SU-2021:2619-1Not reported
Susedjvulibrerpmlinux enterprise module for desktop applications 15 sp33.5.27-11.11.1Not reportedSUSE-SU-2021:2619-1Not reported
Susedjvulibrerpmlinux enterprise module for package hub 15 sp23.5.27-11.11.1Not reportedSUSE-SU-2021:2619-1Not reported
Susedjvulibrerpmlinux enterprise module for package hub 15 sp33.5.27-11.11.1Not reportedSUSE-SU-2021:2619-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [djview]Fixed

    Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • [djview3]Fixed

    Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • [djvuserve]Fixed

    Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

  • Source package: [djvulibre]

    Details (4)
    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.2~deb12u1 · all · bookworm

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

    • 3.5.28-2.1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · bookworm; dsa · djvulibre · debian · 12

[Debian 13 (Trixie)]

  • [djview]Fixed

    Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • [djview3]Fixed

    Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · amd64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · arm64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • [djvuserve]Fixed

    Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · amd64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · arm64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · amd64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · arm64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · amd64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · arm64 · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

  • Source package: [djvulibre]

    Details (2)
    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

    • 3.5.28-2.2 · all · trixie

      Fixed · Fixed: 3.5.27.1-12

      dsa · djvulibre · debian · 13

Observed:

References