rpm package
opensuse/librecad&distro=openSUSE Leap 15.3
pkg:rpm/opensuse/librecad&distro=openSUSE%20Leap%2015.3
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-45342 | — | < 2.2.0~rc3-bp153.2.9.1 | 2.2.0~rc3-bp153.2.9.1 | Jan 25, 2022 | A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. | ||
| CVE-2021-45341 | — | < 2.2.0~rc3-bp153.2.9.1 | 2.2.0~rc3-bp153.2.9.1 | Jan 25, 2022 | A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. | ||
| CVE-2021-21900 | — | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability. | ||
| CVE-2021-21899 | — | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. | ||
| CVE-2021-21898 | — | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. |
- CVE-2021-45342Jan 25, 2022affected < 2.2.0~rc3-bp153.2.9.1fixed 2.2.0~rc3-bp153.2.9.1
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
- CVE-2021-45341Jan 25, 2022affected < 2.2.0~rc3-bp153.2.9.1fixed 2.2.0~rc3-bp153.2.9.1
A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
- CVE-2021-21900Nov 19, 2021affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
- CVE-2021-21899Nov 19, 2021affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
- CVE-2021-21898Nov 19, 2021affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.