CVE-2019-20015: Medium severity gnu libredwg vulnerability
Published Dec 27, 2019
·Updated
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec.
Affected Software
3 affected components
GNU LibreDWG=0.9.2
openSUSE Backports SLE=15.0-sp1
openSUSE Leap=15.1
Event History
Dec 27, 2019
CVE Published
via MITRE·12:14 AM
Data Sourced
via MITRE·12:14 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20015?
CVE-2019-20015 is classified as a medium severity vulnerability due to its potential for excessive memory allocation.
2
How do I fix CVE-2019-20015?
To fix CVE-2019-20015, upgrade GNU LibreDWG to the latest version that addresses this vulnerability.
3
What types of software are affected by CVE-2019-20015?
CVE-2019-20015 affects GNU LibreDWG version 0.9.2 and specific versions of openSUSE Backports and openSUSE Leap.
4
What impact can CVE-2019-20015 have on affected systems?
CVE-2019-20015 can lead to denial of service through excessive memory consumption on affected systems.
5
Is there a workaround for CVE-2019-20015?
Currently, the most effective method to mitigate CVE-2019-20015 is to update to a patched version of the software.