medium6.5
CVE-2019-20013
An issue was discovered in GNU LibreDWG before 0.93.
Impact
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Libredwg | before 0.9.3 |
| Opensuse | Backports Sle | Version 15.0 |
| Opensuse | Leap | Version 15.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
- https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3
- https://github.com/LibreDWG/libredwg/issues/176
- https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643060
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
- https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3
- https://github.com/LibreDWG/libredwg/issues/176
- https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643060