SUSE CVE-2021-45343

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document...

SUSE CVE-2021-45342

A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document...

Fedora 35 : libdxfrw / librecad (2022-3dd3274ae2)

The remote Fedora 35 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-3dd3274ae2 advisory. Update to 2.2.0 RC4. ---- Update librecad to 2.2.0 rc3. Apply fixes to libdxfrw and librecad for CVE-2021-45341, CVE-2021-45342, CVE-2021-45343. Thi...

Fedora: Security Advisory for librecad (FEDORA-2022-3dd3274ae2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Remote Code Execution (RCE)

librecad is vulnerable to remote code execution. The vulnerability exists due to a heap buffer overflow in DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib allowing an attacker to inject maliciously crafted script into the system via a specially-crafted .dxf file...

Security update for librecad (important)

openSUSE Security Update: Security update for librecad Announcement ID: openSUSE-SU-2022:10002-1 Rating: important References: 1195105 1195122 1197664 Cross-References: CVE-2021-45341 CVE-2021-45342 CVSS scores: CVE-2021-45341 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45342...

Debian DLA-3046-1 : librecad - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3046 advisory. - A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffe...

Debian: Security Advisory (DLA-3046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3046-1] librecad security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3046-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 07, 2022 https://wiki.debian.org/LTS -...

DLA-3046-1 librecad - security update

Bulletin has no description...

OPENSUSE-SU-2022:10002-1 Security update for librecad

This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document boo1195105 - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD allows a...

openSUSE 15 Security Update : librecad (openSUSE-SU-2022:0143-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0143-1 advisory. - A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote...

OPENSUSE-SU-2022:0143-1 Security update for librecad

This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD that allowed an attacker to achieve remote code execution via a crafted JWW document boo1195105 - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD...

Security update for librecad (critical)

openSUSE Security Update: Security update for librecad Announcement ID: openSUSE-SU-2022:0143-1 Rating: critical References: 1195105 1195122 Cross-References: CVE-2021-45341 CVE-2021-45342 CVSS scores: CVE-2021-45341 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45342 NVD : 7.8...

CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

Mageia: Security Advisory (MGASA-2022-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libdxfrw packages fix security vulnerability

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. CVE-2021-21898 A code...

Updated librecad packages fix security vulnerability

A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. CVE-2021-45341 A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and olde...

MGASA-2022-0152 Updated librecad packages fix security vulnerability

A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. CVE-2021-45341 A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and olde...

openSUSE 15 Security Update : libdxfrw, librecad (openSUSE-SU-2022:0067-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0067-1 advisory. - A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A...