Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian: DLA-2838-1 Moderate: LibreCAD Code Execution Threats

debian lts
Calendar Grey December 3, 2021
Dist Debian Esm H88
Debian LTS Advisory DLA-2950-1 addresses issues in GIMP along with essential security patches.
Several vulnerabilities were discovered in LibreCAD, an application for computer aided design (CAD) in two dimensions
Topics%20covered

Topics Covered

security advisory code execution debian heap overflow librecad

Summary

CVE-2021-21898

A code execution vulnerability exists in the
dwgCompressor::decompress18() functionality of LibreCad
libdxfrw. A specially-crafted .dwg file can lead to an
out-of-bounds write.

CVE-2021-21899

A code execution vulnerability exists in the
dwgCompressor::copyCompBytes21 functionality of LibreCad
libdxfrw. A specially-crafted .dwg file can lead to a heap buffer
overflow.

CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType()
functionality of LibreCad libdxfrw. A specially-crafted .dxf file
can lead to a use-after-free vulnerability.

For Debian 9 stretch, these problems have been fixed in version
2.1.2-1+deb9u2.

We recommend that you upgrade your librecad packages.

For the detailed security status of librecad please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/librecad

Further information about Debian LTS security advisories, how to apply

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Package: librecad
Version: 2.1.2-1+deb9u2
CVE ID: CVE-2021-21898 CVE-2021-21899 CVE-2021-21900

Topics%20covered

Topics Covered

security advisory code execution debian heap overflow librecad

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here