CVE-2019-20012: Medium severity gnu libredwg vulnerability
Published Dec 27, 2019
·Updated
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeHATCHprivate in dwg.spec.
Affected Software
3 affected components
GNU LibreDWG=0.9.2
openSUSE Backports SLE=15.0-sp1
openSUSE Leap=15.1
Event History
Dec 27, 2019
CVE Published
via MITRE·12:15 AM
Data Sourced
via MITRE·12:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20012?
CVE-2019-20012 is considered a high severity vulnerability due to the potential for excessive memory allocation during processing.
2
How do I fix CVE-2019-20012?
To mitigate CVE-2019-20012, update GNU LibreDWG to version 0.9.3 or later.
3
What are the affected versions for CVE-2019-20012?
CVE-2019-20012 affects GNU LibreDWG version 0.9.2 and certain versions of openSUSE Backports and SUSE openSUSE.
4
What type of vulnerability is CVE-2019-20012?
CVE-2019-20012 is a memory allocation vulnerability that can be exploited through crafted input.
5
Who discovered CVE-2019-20012?
CVE-2019-20012 was discovered by security researchers analyzing the GNU LibreDWG codebase.