rpm package
suse/libdxfrw&distro=SUSE Package Hub 15 SP3
pkg:rpm/suse/libdxfrw&distro=SUSE%20Package%20Hub%2015%20SP3
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-21900 | — | < 1.0.1+git.20220109-bp153.2.3.1 | 1.0.1+git.20220109-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability. | ||
| CVE-2021-21899 | — | < 1.0.1+git.20220109-bp153.2.3.1 | 1.0.1+git.20220109-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. | ||
| CVE-2021-21898 | — | < 1.0.1+git.20220109-bp153.2.3.1 | 1.0.1+git.20220109-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. |
- CVE-2021-21900Nov 19, 2021affected < 1.0.1+git.20220109-bp153.2.3.1fixed 1.0.1+git.20220109-bp153.2.3.1
A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
- CVE-2021-21899Nov 19, 2021affected < 1.0.1+git.20220109-bp153.2.3.1fixed 1.0.1+git.20220109-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
- CVE-2021-21898Nov 19, 2021affected < 1.0.1+git.20220109-bp153.2.3.1fixed 1.0.1+git.20220109-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.