CVE-2020-21817: Null Pointer Dereference

Published May 17, 2021

Updated

A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).

Affected Software

1 affected component

GNU LibreDWG=0.10.2641

Remediation

Patch Available

https://github.com/LibreDWG/libredwg/issues/182#issue-547887727

Event History

May 17, 2021

CVE Published

via MITRE·06:47 PM

Data Sourced

via MITRE·06:47 PM

Description

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-21817?

CVE-2020-21817 is a null pointer dereference issue in GNU LibreDWG 0.10.2641, which can cause a denial of service (application crash).

How does CVE-2020-21817 affect GNU LibreDWG?

CVE-2020-21817 affects GNU LibreDWG 0.10.2641, leading to a null pointer dereference issue.

What is the severity of CVE-2020-21817?

CVE-2020-21817 has a severity keyword of 'medium' and a severity value of 6.5.

How can CVE-2020-21817 be exploited?

CVE-2020-21817 can be exploited by an attacker causing a null pointer dereference in GNU LibreDWG 0.10.2641 via htmlescape.

Is there a fix available for CVE-2020-21817?

At this time, there is no publicly available fix for CVE-2020-21817. It is recommended to update to the latest version of GNU LibreDWG when a fix becomes available.