CVE-2021-21897: Integer Underflow

Published Sep 8, 2021

Updated

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

7 affected components

Ribbonsoft dxflib=3.17.0

Fedoraproject Extra Packages For Enterprise Linux=7.0

Fedoraproject Extra Packages For Enterprise Linux=8.0

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Fedoraproject Fedora=37

Debian Debian Linux=9.0

Event History

Sep 8, 2021

CVE Published

via MITRE·03:11 PM

Data Sourced

via MITRE·03:11 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-21897?

CVE-2021-21897 has a high severity level due to the potential for remote code execution via a specially-crafted .dxf file.

How do I fix CVE-2021-21897?

To mitigate CVE-2021-21897, update to the latest version of Ribbonsoft dxflib or apply any available patches from your Linux distribution.

What versions are affected by CVE-2021-21897?

CVE-2021-21897 specifically affects Ribbonsoft dxflib version 3.17.0 and certain versions of Fedora and Debian distributions.

What type of vulnerability is CVE-2021-21897?

CVE-2021-21897 is categorized as a code execution vulnerability that can lead to a heap buffer overflow.

Can CVE-2021-21897 be exploited remotely?

Yes, CVE-2021-21897 can be exploited remotely if an attacker sends a malicious .dxf file to a vulnerable system.