CVE-2020-6609: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

CVE-2020-6611: NULL Pointer Dereference

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...

PT-2020-19178

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a NULL pointer dereference in the get next owned entity function in dwg.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider applying a patch or fix that addresses...

PT-2020-19176

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the read pages map function located in decode r2007.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer versi...

PT-2020-19177

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to an attempted excessive memory allocation in the read sections map function within the decode r2007.c file. Recommendations For GNU LibreDWG version 0.9.3.2564, consider applyi...

PT-2020-19180

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the bit search sentinel function located in bits.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer version...

CVE-2020-6613: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6612: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

PT-2020-19182

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to an invalid pointer dereference in the dwg dynapi entity value function, located in the dynapi.c file, which is generated by gen-dynapi.pl. Recommendations For GNU LibreDWG...

CVE-2020-6614: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6615: NULL Pointer Dereference

GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...

CVE-2020-6610: Allocation of Resources Without Limits or Throttling

GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...

CVE-2018-13033

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted ELF file, as demonstrated by bfdelfparseattributes in elf-attrs.c and bfdmalloc in libbfd.c...

CVE-2018-20671

loadspecificdebugsection in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size...

EulerOS 2.0 SP8 : patch (EulerOS-SA-2020-1022)

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for...

EulerOS 2.0 SP8 : tar (EulerOS-SA-2020-1035)

According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be us...

NewStart CGSL CORE 5.05 / MAIN 5.05 : binutils Multiple Vulnerabilities (NS-SA-2019-0228)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangli...

NewStart CGSL CORE 5.04 / MAIN 5.04 : fribidi Vulnerability (NS-SA-2019-0264)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has fribidi packages installed that are affected by a vulnerability: - A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of...

NewStart CGSL CORE 5.05 / MAIN 5.05 : gcc Multiple Vulnerabilities (NS-SA-2019-0233)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gcc packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service Fortran application crash...