PT-2020-10870

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a stack overflow in bits.c, possibly related to bit read TF. Recommendations For GNU LibreDWG versions through 0.9.3, consider updating to a...

CVE-2019-20910: Out-of-bounds Read

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decodeR13R2000 in decode.c, a different vulnerability than CVE-2019-20011...

CVE-2019-20909: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodeLWPOLYLINE in dwg.spec...

CVE-2019-20914: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...

Medium: patch

Issue Overview: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. CVE-2019-13636 Affected Packages: patch Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for t...

PT-2020-10871

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a heap-based buffer over-read in dwg encode entity in common entity data.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consid...

PT-2020-10869

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description The issue is related to a denial of service in the bit calc CRC function in bits.c, caused by crafted input that affects a for loop. Recommendations For GNU LibreDWG versions prior to 0.9.4,...

PT-2020-10867

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode LWPOLYLINE in dwg.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consider...

PT-2020-10872

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode common entity handle data in common entity handle data.spec. Recommendations For GNU LibreD...

PT-2020-10868

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the decode R13 R2000 function in decode.c. Recommendations For GNU LibreDWG versions prior t...

CVE-2019-20911: Loop with Unreachable Exit Condition

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

CVE-2019-20912: Out-of-bounds Write

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bitreadTF...

PT-2020-10873

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.9.4 Description An issue was discovered in GNU LibreDWG where crafted input leads to a heap-based buffer over-read in the bit write TF function in bits.c. Recommendations For GNU LibreDWG versions prior to 0.9....

Fedora: Security Advisory for kernel (FEDORA-2020-3c3d1d7006)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: ngircd-26-3.fc31

ngIRCd is a free open source daemon for Internet Relay Chat IRC, developed under the GNU General Public License GPL. It's written from scratch and is not based upon the original IRCd like many others...

Ubuntu 16.04 LTS / 18.04 LTS : GNU C Library vulnerabilities (USN-4416-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4416-1 advisory. Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote attacker could use this issue to cau...

Fedora: Security Advisory for mediawiki (FEDORA-2020-9c97633708)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: alpine-2.23-2.fc31

Alpine -- an Alternatively Licensed Program for Internet News & Email -- is a tool for reading, sending, and managing electronic messages. Alpine is the successor to Pine and was developed by Computing & Communications at the University of Washington. Though originally designed for inexperienced...

Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2020-1726)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2020-1766)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...