CVE-2020-6610 :: Enginsight Vulnerability Database

Severity

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Atk. Vector

NETWORK

Atk. Complexity

LOW

Priv. Required

NONE

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Vendor	Product	Version
gnu	libredwg	0.9.3.2564
opensuse	leap	15.1

𝑥

= Vulnerable software versions

Known Exploits!

https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447120

Common Weakness Enumeration

CWE-770 - Allocation of Resources Without Limits or Throttling
The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html

https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447120