Lucene search

GoogleOSV:CVE-2021-28237

HistoryDec 02, 2021 - 10:15 p.m.

CVE-2021-28237

2021-12-0222:15:08

Google

osv.dev

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.1%

JSON

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

CPENameOperatorVersion
libredwgeq0.8.2337
libredwgeq0.10.1.2740
libredwgeq0.7.1333
libredwgeq0.10.1.3282
libredwgeq0.6.2.1273
libredwgeq0.9.2389
libredwgeq0.4.834
libredwgeq0.4.938
libredwgeq0.11.1.3904
libredwgeq0.10.1.3229

Name	Operator	Version
libredwg	eq	0.8.2337
libredwg	eq	0.10.1.2740
libredwg	eq	0.7.1333
libredwg	eq	0.10.1.3282
libredwg	eq	0.6.2.1273
libredwg	eq	0.9.2389
libredwg	eq	0.4.834
libredwg	eq	0.4.938
libredwg	eq	0.11.1.3904
libredwg	eq	0.10.1.3229

Rows per page:

1-10 of 6041

References

github.com/LibreDWG/libredwg/issues/325

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for OSV:CVE-2021-28237