CVE-2019-20014: Double Free

An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwgfree in free.c...

CVE-2019-20013: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

PT-2019-16050

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue was discovered where crafted input leads to an attempted excessive memory allocation in the dwg decode LWPOLYLINE private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92, a...

GNU LibreDWG Post-Release Reuse Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A post-release reuse vulnerability exists in the 'resolveobjectrefvector' function in the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files,...

AVE DOMINAplus 1.10.x Authentication Bypass

AVE DOMINAplus =1.10.x Authentication Bypass Exploit Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...

Linux/x86 Encoder / Decoder Shellcode (117 bytes)

Title : Linux/x86 - Encoder - Random Bytes + XOR/SUB/NOT/ROR / Decoder - ROL/NOT/ADD/XOR execve/bin/sh Shellcode 117 bytes Author : Xenofon Vassilakopoulos Date : July, 2019 Tested on : Linux kali 5.3.0-kali2-686-pae 1 SMP Debian 5.3.9-3kali1 2019-11-20 i686 GNU/Linux Architecture : i686 GNU/Linu...

GNU LibreDWG Excessive Memory Allocation Vulnerability (CNVD-2020-03561)

LibreDWG is a free C library for reading and writing DWG files. An excessive memory allocation vulnerability exists in dwgdecodeHATCHprivate in dwg.spec in GNU LibreDWG 0.92. An attacker can exploit this vulnerability via specially crafted input to cause an attempt to allocate too much memory,...

PT-2019-16046

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description A heap-based buffer over-read issue was discovered in the decode R13 R2000 function in decode.c. Recommendations For GNU LibreDWG version 0.92, at the moment, there is no information about a newer version...

CVE-2019-20015: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

PT-2019-16045

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description A use-after-free issue was discovered in the resolve objectref vector function within the decode.c file. Recommendations For GNU LibreDWG version 0.92, at the moment, there is no information about a newer...

CVE-2019-20012: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeHATCHprivate in dwg.spec...

CVE-2019-20010: Use After Free

An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolveobjectrefvector in decode.c...

AVE DOMINAplus 1.10.x Authentication Bypass Vulnerability

AVE DOMINAplus =1.10.x Authentication Bypass Exploit Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...

PT-2019-16043

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode SPLINE private function in dwg.spec. Recommendations For GNU LibreDWG versions...

PT-2019-16048

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the decode 3dsolid function in dwg.spec, potentially leading to issues. Recommendations For...

PT-2019-16049

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue was discovered in GNU LibreDWG. There is a double-free in dwg free in free.c. Recommendations For versions prior to 0.93, update to version 0.93 or later to resolve the issue...

CVE-2019-20011: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decodeR13R2000 in decode.c...

PT-2019-16047

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...

CVE-2018-20002

The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service memory consumption, as demonstrated by nm...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2686)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-bas...