CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6613

CVE-2020-6613 affects GNU LibreDWG 0.9.3.2564 and is described as a heap-based over-read in bit_search_sentinel (bits.c). Connected entries show fixes in libredwg upstream to release 0.10 and security advisories (openSUSE/SUSE updates) that patch libredwg to mitigate CVE-2020-6613 (and related CV...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6614

CVE-2020-6614 affects GNU LibreDWG 0.9.3.2564 with a heap-based buffer over-read in bfr_read (decode.c). Connected advisories show libredwg fixes in OpenSUSE/SUSE updates (0.10 release), addressing this and related CVEs (6609–6615). Affected: openSUSE Leap 15.1 and backports; remediation is upgra...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6615

GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...

CVE-2020-6615

GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...

CVE-2020-6615

CVE-2020-6615 affects GNU LibreDWG 0.9.3.2564, with an invalid pointer dereference in dwg_dynapi_entity_value (dynapi.c generated by gen-dynapi.pl). Connected sources tie this CVE to libredwg updates fixing multiple issues in version 0.10, and openSUSE/SUSE advisories list it among 7 vulnerabilit...

CVE-2020-6609: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...

CVE-2020-6611: NULL Pointer Dereference

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...

CVE-2020-6615: NULL Pointer Dereference

GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...

PT-2020-19182

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to an invalid pointer dereference in the dwg dynapi entity value function, located in the dynapi.c file, which is generated by gen-dynapi.pl. Recommendations For GNU LibreDWG...

PT-2020-19178

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a NULL pointer dereference in the get next owned entity function in dwg.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider applying a patch or fix that addresses...

CVE-2020-6614: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6613: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6610: Allocation of Resources Without Limits or Throttling

GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...

PT-2020-19177

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to an attempted excessive memory allocation in the read sections map function within the decode r2007.c file. Recommendations For GNU LibreDWG version 0.9.3.2564, consider applyi...

PT-2020-19176

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the read pages map function located in decode r2007.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer versi...