Описание
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
Ссылки
- ExploitIssue TrackingPatchThird Party Advisory
- Third Party Advisory
- ExploitIssue TrackingPatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:librecad:librecad:2.2.0:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00896
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-476
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 5 лет назад
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
CVSS3: 5.5
debian
почти 5 лет назад
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of ...
CVSS3: 5.5
github
больше 4 лет назад
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
CVSS3: 5.5
altlinux
больше 2 лет назад
ALT-PU-2024-6623: package `librecad` update to version 2.2.0.2-alt1
EPSS
Процентиль: 60%
0.00896
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-476