exploitDog

CVE-2019-20911

Опубликовано: 16 июл. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.

Ссылки

https://github.com/LibreDWG/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5
Patch
Third Party Advisory
https://github.com/LibreDWG/libredwg/issues/178
Exploit
Third Party Advisory
https://github.com/LibreDWG/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5
Patch
Third Party Advisory
https://github.com/LibreDWG/libredwg/issues/178
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*

Версия до 0.9.3 (включая)

EPSS

Процентиль: 51%

0.00285

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2019-20911

CVSS3: 6.5

debian

больше 5 лет назад

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input w ...

GHSA-79wh-vc9g-6xpc

github

больше 3 лет назад

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.

EPSS

Процентиль: 51%

0.00285

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835