CVE-2019-20915

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

CVE-2019-20915

CVE-2019-20915 affects GNU LibreDWG up to version 0.9.3. A crafted input triggers a heap-based buffer over-read in bit_write_TF within bits.c, as described across multiple connected documents. Impact details in sources vary, but CVSS data from NVD indicates high impact under network attack with p...

CVE-2019-20915

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

PT-2020-10870

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a stack overflow in bits.c, possibly related to bit read TF. Recommendations For GNU LibreDWG versions through 0.9.3, consider updating to a...

PT-2020-10872

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode common entity handle data in common entity handle data.spec. Recommendations For GNU LibreD...

PT-2020-10867

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode LWPOLYLINE in dwg.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consider...

CVE-2019-20914: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...

CVE-2019-20909: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodeLWPOLYLINE in dwg.spec...

CVE-2019-20915: Out-of-bounds Read

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

Medium: patch

Issue Overview: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. CVE-2019-13636 Affected Packages: patch Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for t...

PT-2020-10871

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a heap-based buffer over-read in dwg encode entity in common entity data.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consid...

PT-2020-10873

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the bit write TF function in bits.c. Recommendations For GNU LibreDWG versions prior to 0.9....

CVE-2019-20911: Loop with Unreachable Exit Condition

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

CVE-2019-20910: Out-of-bounds Read

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decodeR13R2000 in decode.c, a different vulnerability than CVE-2019-20011...

CVE-2019-20913: Out-of-bounds Read

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwgencodeentity in commonentitydata.spec...

PT-2020-10868

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the decode R13 R2000 function in decode.c. Recommendations For GNU LibreDWG versions prior t...

CVE-2019-20912: Out-of-bounds Write

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bitreadTF...

PT-2020-10869

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description The issue is related to a denial of service in the bit calc CRC function in bits.c, caused by crafted input that affects a for loop. Recommendations For GNU LibreDWG versions prior to 0.9.4,...

Fedora: Security Advisory for kernel (FEDORA-2020-3c3d1d7006)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: ngircd-26-3.fc31

ngIRCd is a free open source daemon for Internet Relay Chat IRC, developed under the GNU General Public License GPL. It's written from scratch and is not based upon the original IRCd like many others...