CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 2CVE-2019-20013
https://notcve.org/view.php?id=CVE-2019-20013
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec. Se detectó un problema en GNU LibreDWG versiones anteriores a 0.93. Una entrada diseñada conllevará a un intento de asignación de memoria excesiva en la función decode_3dsolid en el archivo dwg.spec. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3 https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643060 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 2CVE-2019-20014
https://notcve.org/view.php?id=CVE-2019-20014
An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. Se detectó un problema en GNU LibreDWG versiones anteriores a 0.93. Se presenta una doble liberación en la función dwg_free en el archivo free.c. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3 https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643172 • CWE-415: Double Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-14524
https://notcve.org/view.php?id=CVE-2018-14524
dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs. dwg_decode_eed en decode.c en GNU LibreDWG en versiones anteriores a la 0.6 conduce a una doble liberación (double free) en dwg_free_eed en free.c, porque no gestiona correctamente el valor obj->eed después de que ocurra una liberación. • https://github.com/LibreDWG/libredwg/issues/33 https://savannah.gnu.org/forum/forum.php?forum_id=9211 • CWE-415: Double Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-14471
https://notcve.org/view.php?id=CVE-2018-14471
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file. dwg_obj_block_control_get_block_headers en dwg_api.c en GNU LibreDWG 0.5.1048, permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y SEGV) mediante un archivo dwg manipulado. • https://github.com/LibreDWG/libredwg/issues/32 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-14443
https://notcve.org/view.php?id=CVE-2018-14443
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). get_first_owned_object en dwg.c en GNU LibreDWG 0.5.1036 permite que los atacantes remotos provoquen una denegación de servicio (SEGV). • http://hac425.unaux.com/index.php/archives/53 https://github.com/ArchimedesCAD/libredwg/issues/6 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •