VYPR

CWE-369

Divide By Zero

BaseDraftLikelihood: Medium

Description

The product divides a value by zero.

This weakness typically occurs when an unexpected value is provided to the product, or if an error occurs that is not properly detected. It frequently occurs in calculations involving physical dimensions such as size, length, width, and height.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (465)

page 6 of 24
  • CVE-2019-19888MedDec 18, 2019
    risk 0.42cvss 6.5epss 0.01

    jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.

  • CVE-2019-15133MedAug 17, 2019
    risk 0.42cvss 6.5epss 0.02

    In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.

  • CVE-2019-14443MedJul 30, 2019
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.

  • CVE-2019-14249MedJul 24, 2019
    risk 0.42cvss 6.5epss 0.03

    dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.

  • CVE-2019-13390MedJul 7, 2019
    risk 0.42cvss 6.5epss 0.02

    In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c.

  • CVE-2019-7156MedJan 29, 2019
    risk 0.42cvss 6.5epss 0.01

    In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.

  • CVE-2018-20544MedDec 28, 2018
    risk 0.42cvss 6.5epss 0.02

    There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.

  • CVE-2018-18195MedOct 9, 2018
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample::Sample in DLS.cpp.

  • CVE-2018-17438MedSep 24, 2018
    risk 0.42cvss 6.5epss 0.02

    A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

  • CVE-2018-17434MedSep 24, 2018
    risk 0.42cvss 6.5epss 0.02

    A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

  • CVE-2018-17237MedSep 20, 2018
    risk 0.42cvss 6.5epss 0.01

    A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.

  • CVE-2018-17233MedSep 20, 2018
    risk 0.42cvss 6.5epss 0.02

    A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service…

  • CVE-2018-11207MedMay 16, 2018
    risk 0.42cvss 6.5epss 0.02

    A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

  • CVE-2018-11203MedMay 16, 2018
    risk 0.42cvss 6.5epss 0.02

    A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

  • CVE-2018-9304MedApr 4, 2018
    risk 0.42cvss 6.5epss 0.02

    In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.

  • CVE-2017-18207MedMar 1, 2018
    risk 0.42cvss 6.5epss 0.01

    The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue…

  • CVE-2018-2385MedFeb 14, 2018
    risk 0.42cvss 6.5epss 0.01

    Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.

  • CVE-2017-17508MedDec 11, 2017
    risk 0.42cvss 6.5epss 0.01

    In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

  • CVE-2017-17381MedDec 7, 2017
    risk 0.42cvss 6.5epss 0.00

    The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.

  • CVE-2017-16942MedNov 25, 2017
    risk 0.42cvss 6.5epss 0.01

    In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.