PT-2018-12565 · Gnu · Gnu Libredwg

Reini_Urban · Publicado 2018-07-23 · Atualizado 2024-06-15 · CVE-2018-14524

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.6

Description The issue arises from improper management of the obj->eed value after a free occurs in the dwg decode eed function in decode.c, leading to a double free in the dwg free eed function in free.c.

Recommendations For versions prior to 0.6, update to version 0.6 or later to resolve the issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2018-14524

OPENSUSE-SU-2024:10981-1

Produtos afetados

Gnu Libredwg

Referências · 25

• https://github.com/LibreDWG/libredwg/issues/33 · Nota
• https://suse.com/security/cve/CVE-2019-9774 · Nota
• https://suse.com/security/cve/CVE-2019-9778 · Nota
• https://suse.com/security/cve/CVE-2019-9770 · Nota
• https://savannah.gnu.org/forum/forum.php?forum_id=9211 · Correção
• https://suse.com/security/cve/CVE-2019-20010 · Nota
• https://suse.com/security/cve/CVE-2019-20009 · Nota
• https://suse.com/security/cve/CVE-2019-9773 · Nota
• https://suse.com/security/cve/CVE-2019-9772 · Nota
• https://suse.com/security/cve/CVE-2020-6615 · Nota
• https://suse.com/security/cve/CVE-2019-9771 · Nota
• https://suse.com/security/cve/CVE-2019-9779 · Nota
• https://suse.com/security/cve/CVE-2019-9775 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10981-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-6609 · Nota