First published: Wed Jan 08 2020(Updated: )
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU LibreDWG | =0.9.3.2564 | |
openSUSE Backports | =15.0-sp1 | |
SUSE Linux | =15.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-6609 is classified as a moderate severity vulnerability.
To fix CVE-2020-6609, update GNU LibreDWG to the latest version that addresses this vulnerability.
The impact of CVE-2020-6609 includes potential exploitation leading to a heap-based buffer over-read, which could compromise application stability.
GNU LibreDWG version 0.9.3.2564 is specifically affected by CVE-2020-6609.
Yes, CVE-2020-6609 also affects the openSUSE Backports and Leap distributions and should be addressed in their respective updates.