Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-27845
CVE-2021-27845:
NixOS vulnerability analysis and mitigation
Overview
A Divide-by-zero vulnerability was identified in JasPer Image Coding Toolkit 2.0, specifically in the file jasper/src/libjasper/jpc/jpc_enc.c. The vulnerability was discovered and reported on February 18, 2019, and was assigned CVE-2021-27845 on March 1, 2021 (MITRE CVE, Debian Tracker).
Technical details
The vulnerability exists in the cp_create function within jpc_enc.c at line 749. The issue occurs when performing a division operation where the divisor (cp->rawsize) could potentially be zero, leading to a divide-by-zero condition. This vulnerability was identified during automated bug scanning (GitHub Issue).
Impact
A successful exploitation of this divide-by-zero vulnerability could potentially lead to a program crash or denial of service condition in applications using the JasPer Image Coding Toolkit.
Exploitability
The vulnerability requires an attacker to provide specially crafted input that would trigger the divide-by-zero condition in the cp_create function of the JasPer toolkit (GitHub Issue).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management