PT-2020-19177

CVE-2020-6610

Published

2020-01-08

Updated

2022-01-01

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564

Description The issue is related to an attempted excessive memory allocation in the read sections map function within the decode r2007.c file.

Recommendations For GNU LibreDWG version 0.9.3.2564, consider applying a patch or fix that addresses the excessive memory allocation issue in the read sections map function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-770: Allocation of Resources Without Limits or Throttling

Related identifiers

CVE-2020-6610

OPENSUSE-SU-2020:0096-1

OPENSUSE-SU-2020_0096-1