CVE-2020-21814

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97...

CVE-2020-21814

CVE-2020-21814 describes a heap-based buffer overflow in GNU LibreDWG 0.10.2641 triggered via htmlwescape ../../programs/escape.c:97. The connected documents consistently identify the affected component as LibreDWG and the vulnerable code path in escape.c, but none provide a concrete patch/versio...

CVE-2020-21813

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via outputTEXT ../../programs/dwg2SVG.c:114...

CVE-2020-21813

Summary: CVE-2020-21813 affects GNU LibreDWG, specifically version 0.10.2641, with a heap-based buffer overflow exploitable via the function path output_TEXT in dwg2SVG.c:114. What is affected: LibreDWG 0.10.2641 (GNU LibreDWG). Root cause (as stated): heap-based buffer overflow in output_TEXT at...

PT-2021-10675

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the read 2004 compressed section function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, consider applying a...

PT-2021-10668

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is related to the output TEXT function in the dwg2SVG.c file at line 114. Recommendations: For GNU LibreDWG version 0.10.2641,...

Linux kernel post-release reuse vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in net/bluetooth/hcievent.c in Linux kernel versions prior to 5.12.4 when...

PT-2021-10671

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment,...

PT-2021-10683

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations:...

PT-2021-10669

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is located in the ../../programs/escape.c file at line 97, and is related to the htmlwescape function. Recommendations: For GNU...

PT-2021-10688

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit read RC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider restricting acce...

PT-2021-10687

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists due to a problem in the read 2004 section revhistory function located in decode.c at line 3051. This could potentially lead to exploitation. Recommendations: For...

PT-2021-10680

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of t...

PT-2021-10674

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the escape.c file at line 51, specifically via htmlescape. Recommendations: For GNU LibreDWG version 0.10.2641, consider...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitreadB ... /... /src/bits.c:135 to exploit the vulnerability and cause a heap buffer overflow...

PT-2021-10684

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there i...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:46 to exploit the vulnerability and cause a heap buffer overflow...

USN-4954-1: GNU C Library vulnerabilities

Jason Royes and Samuel Dytrych discovered that the memcpy implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow vulnerability. An attacker could possibly use this to cause a denial of service application crash or execute arbitrary code. CVE-2020-6096 It was...

USN-4954-1 glibc vulnerabilities

Jason Royes and Samuel Dytrych discovered that the memcpy implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow vulnerability. An attacker could possibly use this to cause a denial of service application crash or execute arbitrary code. CVE-2020-6096 It was...

Ubuntu 16.04 LTS : GNU C Library vulnerabilities (USN-4954-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4954-1 advisory. Jason Royes and Samuel Dytrych discovered that the memcpy implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow...