CVE-2020-21844: High severity GNU LibreDWG vulnerability
Published May 17, 2021
·Updated
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read2004sectionheader ../../src/decode.c:2580.
Affected Software
1 affected component
GNU LibreDWG=0.10
Remediation
Event History
May 17, 2021
CVE Published
via MITRE·09:06 PM
Data Sourced
via MITRE·09:06 PM
Description
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-21844?
CVE-2020-21844 is a vulnerability in GNU LibreDWG 0.10 that allows for the execution of arbitrary code remotely due to a memcpy-param-overlap issue.
2
How severe is CVE-2020-21844?
CVE-2020-21844 has a severity keyword of 'high' and a severity value of 8.8.
3
What is the impact of CVE-2020-21844?
The impact of CVE-2020-21844 is the ability to execute arbitrary code remotely.
4
Which component of GNU LibreDWG 0.10 is affected by CVE-2020-21844?
The component affected by CVE-2020-21844 is the read_2004_section_header located at ../../src/decode.c:2580.
5
How can I fix CVE-2020-21844?
To fix CVE-2020-21844, it is recommended to update to a version of GNU LibreDWG that is not affected by the vulnerability.