CVE-2020-21830: Buffer Overflow

Published May 17, 2021

Updated

A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bitcalcCRC ../../src/bits.c:2213.

Affected Software

1 affected component

GNU LibreDWG=0.10

Remediation

Patch Available

https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493134

Event History

May 17, 2021

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

Description

Data Sourced

via NVD·09:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-21830?

CVE-2020-21830 is a heap based buffer overflow vulnerability in GNU LibreDWG 0.10.

How severe is CVE-2020-21830?

CVE-2020-21830 has a severity rating of 8.8 (high).

How does CVE-2020-21830 impact GNU LibreDWG?

CVE-2020-21830 allows an attacker to perform a heap based buffer overflow via bit_calc_CRC in the bits.c file of GNU LibreDWG 0.10.

Is there a fix available for CVE-2020-21830?

At the time of writing, no official fix has been released for CVE-2020-21830. It is recommended to follow the official project's security advisories and apply any patches or updates as soon as they become available.

Where can I find more information about CVE-2020-21830?

You can find more information about CVE-2020-21830 in the official CVE database or through the references provided: http://gnu.com and https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493134