CVE-2021-21897
08.09.2021, 16:15
A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
| Vendor | Product | Version |
|---|---|---|
| ribbonsoft | dxflib | 3.17.0 |
| fedoraproject | extra_packages_for_enterprise_linux | 7.0 |
| fedoraproject | extra_packages_for_enterprise_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cloudcompare |
| ||||||||||||||
| dxflib |
| ||||||||||||||
| horizon-eda |
| ||||||||||||||
| librecad |
|
Ubuntu Releases
Common Weakness Enumeration
- CWE-191 - Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
References