CVE-2021-45341: Buffer Overflow
Published Jan 25, 2022
·Updated
A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
Affected Software
10 affected componentsFixes available
debian/librecad
2.1.3-1.2+deb10u12.1.3-1.3+deb11u12.2.0-1
debian/librecad<=2.1.3-2, <=2.1.3-1.3, <=2.1.3-1.2
LibreCAD LibreCAD<2.2.0
LibreCAD LibreCAD=2.2.0-rc1
LibreCAD LibreCAD=2.2.0-rc2
LibreCAD LibreCAD=2.2.0-rc3
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Event History
Jan 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2021-45341?
CVE-2021-45341 is a buffer overflow vulnerability in the CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older.
2
What is the severity of CVE-2021-45341?
The severity of CVE-2021-45341 is critical with a CVSS score of 8.8.
3
How can an attacker exploit CVE-2021-45341?
An attacker can exploit CVE-2021-45341 by using a crafted JWW document to achieve Remote Code Execution.
4
Which versions of LibreCAD are affected by CVE-2021-45341?
LibreCAD 2.2.0-rc3 and older versions are affected by CVE-2021-45341.
5
How can I mitigate CVE-2021-45341?
To mitigate CVE-2021-45341, update to version 2.2.0-rc4 or newer of LibreCAD.