CVE-2020-6613: High severity GNU LibreDWG vulnerability
Published Jan 8, 2020
·Updated
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c.
Affected Software
3 affected components
GNU LibreDWG=0.9.3.2564
openSUSE Backports SLE=15.0-sp1
openSUSE Leap=15.1
Event History
Jan 8, 2020
CVE Published
via MITRE·08:43 PM
Data Sourced
via MITRE·08:43 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-6613?
CVE-2020-6613 has been classified as a high severity vulnerability due to its heap-based buffer over-read which can potentially lead to information disclosure.
2
How do I fix CVE-2020-6613?
To fix CVE-2020-6613, update GNU LibreDWG to version 0.9.3.2565 or later, which addresses the buffer over-read issue.
3
Which software versions are affected by CVE-2020-6613?
CVE-2020-6613 affects GNU LibreDWG version 0.9.3.2564, openSUSE Backports version 15.0-sp1, and openSUSE Leap version 15.1.
4
Is CVE-2020-6613 publicly known?
Yes, CVE-2020-6613 is publicly known and was announced in January 2020 as a security vulnerability in the LibreDWG library.
5
What type of vulnerability is CVE-2020-6613?
CVE-2020-6613 is a heap-based buffer over-read vulnerability found in the bit_search_sentinel function in bits.c.