HIGH
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document
Published Jan 25, 2022
7.8
HIGHCVSS 3.1
EPSS 1.93%
Description
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
Affected products
No data.
Configuration 1
Configuration 2
OR
- 34
- 35
Configuration 3
OR
- 10.0
- 11.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32115 Advisory
- https://github.com/LibreCAD/LibreCAD/issues/1464 ExploitIssue TrackingThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/ vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/ vendor-advisory
- https://security.gentoo.org/glsa/202305-26 vendor-advisory
- https://www.debian.org/security/2022/dsa-5077 vendor-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32115 | Advisory | |
| https://github.com/LibreCAD/LibreCAD/issues/1464 | ExploitIssue TrackingThird Party Advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/ | vendor-advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/ | vendor-advisory | |
| https://security.gentoo.org/glsa/202305-26 | vendor-advisory | |
| https://www.debian.org/security/2022/dsa-5077 | vendor-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 25, 2022
Updated Aug 4, 2024
Reserved Dec 20, 2021
Link CVE-2021-45342
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data