rpm package
suse/librecad&distro=SUSE Package Hub 15 SP3
pkg:rpm/suse/librecad&distro=SUSE%20Package%20Hub%2015%20SP3
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-45342 | Hig | 7.8 | < 2.2.0~rc3-bp153.2.9.1 | 2.2.0~rc3-bp153.2.9.1 | Jan 25, 2022 | A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. | |
| CVE-2021-45341 | Hig | 8.8 | < 2.2.0~rc3-bp153.2.9.1 | 2.2.0~rc3-bp153.2.9.1 | Jan 25, 2022 | A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. | |
| CVE-2021-21898 | Hig | 8.8 | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2021-21900 | Hig | 8.8 | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2021-21899 | Hig | 8.8 | < 2.2.0~rc3-bp153.2.3.1 | 2.2.0~rc3-bp153.2.3.1 | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. |
- affected < 2.2.0~rc3-bp153.2.9.1fixed 2.2.0~rc3-bp153.2.9.1
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
- affected < 2.2.0~rc3-bp153.2.9.1fixed 2.2.0~rc3-bp153.2.9.1
A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
- affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.2.0~rc3-bp153.2.3.1fixed 2.2.0~rc3-bp153.2.3.1
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.