CVE-2021-27847: Divide by Zero
Published Jul 15, 2021
·Updated
Division-By-Zero vulnerability in Libvips 8.10.5 in the function vipseyepoint, eye.c#L83, and function vipsmaskpoint, mask.c#L85.
Affected Software
5 affected componentsFixes available
debian/vips<=8.7.4-1+deb10u1
8.10.5-28.14.1-3+deb12u18.15.1-18.15.2-1
ubuntu/vips<8.4.5-1ubuntu0.1~
8.4.5-1ubuntu0.1~
ubuntu/vips<8.8.3-1
8.8.3-1
ubuntu/vips<8.2.2-1ubuntu0.1~
8.2.2-1ubuntu0.1~
libvips libvips=8.10.5
Event History
Jul 15, 2021
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·03:28 PM
Data Sourced
via MITRE·03:28 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:54 PM
Description
Frequently Asked Questions
1
What is CVE-2021-27847?
CVE-2021-27847 is a Division-By-Zero vulnerability in Libvips 8.10.5.
2
How can the Division-By-Zero vulnerability in Libvips 8.10.5 be exploited?
The Division-By-Zero vulnerability in Libvips 8.10.5 can be exploited by an attacker to cause a denial of service or potentially execute arbitrary code.
3
What is the severity of CVE-2021-27847?
The severity of CVE-2021-27847 is medium with a CVSS score of 6.5.
4
Which versions of Libvips are affected by CVE-2021-27847?
Libvips 8.10.5 is affected by CVE-2021-27847.
5
How can I fix the Division-By-Zero vulnerability in Libvips 8.10.5?
To fix the Division-By-Zero vulnerability in Libvips 8.10.5, it is recommended to update to a version that includes the fix, such as v8.8.0-rc1 or later.