Lucene search
Veracode Vulnerability DatabaseVERACODE:33332HistoryDec 14, 2021 - 8:42 p.m.
Remote Code Execution (RCE)
2021-12-1420:42:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
code execution
vulnerability
librecad
dxfrw
use-after-free
attack
malicious file
EPSS
0.009
Percentile
83.2%
A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
References
lists.debian.org/debian-lts-announce/2021/12/msg00002.html
lists.fedoraproject.org/archives/list/[email protected]/message/RDI3HCTCACMIC7I4ILB3NRU6DCMADI5H/
lists.fedoraproject.org/archives/list/[email protected]/message/ZTIAMP7QJDKV4ADDLR4GVVX2TXYLHVOZ/
security-tracker.debian.org/tracker/CVE-2021-21900
talosintelligence.com/vulnerability_reports/TALOS-2021-1351
www.debian.org/security/2022/dsa-5077
Related
cnvd
cnvd
LibreCad Resource Management Error Vulnerability
2021-11-22 00:00:00
prion
prion
Remote code execution
2021-11-19 19:15:00
ubuntucve
ubuntucve
CVE-2021-21900
2021-11-19 00:00:00
cvelist
cvelist
CVE-2021-21900
2021-11-19 00:00:00
redhatcve
redhatcve
CVE-2021-21900
2022-05-20 22:56:40
talos
talos
LibreCad libdxfrw dxfRW::processLType() use-after-free vulnerability
2021-11-17 00:00:00
cve
cve
CVE-2021-21900
2021-11-19 19:15:08
debiancve
debiancve
CVE-2021-21900
2021-11-19 19:15:08
nvd
nvd
CVE-2021-21900
2021-11-19 19:15:08
openvas
openvas
Fedora: Security Advisory for librecad (FEDORA-2021-67c946a9f3)
2021-12-04 00:00:00
Debian: Security Advisory (DLA-2838-1)
2021-12-04 00:00:00
Fedora: Security Advisory for libdxfrw (FEDORA-2021-fa9e3c23f2)
2021-12-04 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: librecad-2.2.0-0.11.rc2.fc35
2021-12-01 01:21:29
[SECURITY] Fedora 34 Update: librecad-2.2.0-0.11.rc2.fc34
2021-12-01 01:14:37
[SECURITY] Fedora 35 Update: libdxfrw-1.0.1-1.fc35
2021-12-01 01:21:29
nessus
nessus
Debian DLA-2838-1 : librecad - LTS security update
2021-12-03 00:00:00
openSUSE 15 Security Update : libdxfrw, librecad (openSUSE-SU-2022:0067-1)
2022-03-05 00:00:00
GLSA-202305-26 : LibreCAD: Multiple Vulnerabilities
2023-05-21 00:00:00
debian
debian
[SECURITY] [DLA 2838-1] librecad security update
2021-12-03 13:00:22
[SECURITY] [DSA 5077-1] librecad security update
2022-02-15 19:59:25
osv
osv
librecad - security update
2021-12-03 00:00:00
librecad - security update
2022-02-15 00:00:00
librecad vulnerabilities
2023-03-15 16:20:03
suse
suse
Security update for libdxfrw, librecad (important)
2022-03-03 00:00:00
mageia
mageia
Updated libdxfrw packages fix security vulnerability
2022-04-24 13:43:54
gentoo
gentoo
LibreCAD: Multiple Vulnerabilities
2023-05-21 00:00:00
ubuntu
ubuntu
LibreCAD vulnerabilities
2023-03-15 00:00:00