CVE-2021-45342: Buffer Overflow
Published Jan 25, 2022
·Updated
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
Affected Software
10 affected componentsFixes available
debian/librecad
2.1.3-1.2+deb10u12.1.3-1.3+deb11u12.2.0-1
LibreCAD LibreCAD<=2.1.3
LibreCAD LibreCAD=2.2.0-alpha
LibreCAD LibreCAD=2.2.0-rc1
LibreCAD LibreCAD=2.2.0-rc2
LibreCAD LibreCAD=2.2.0-rc3
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Event History
Jan 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-45342?
CVE-2021-45342 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2021-45342?
To mitigate CVE-2021-45342, upgrade to LibreCAD version 2.1.3-1.2+deb10u1, 2.1.3-1.3+deb11u1, or 2.2.0-1.
3
Which versions of LibreCAD are affected by CVE-2021-45342?
CVE-2021-45342 affects LibreCAD versions 2.2.0-rc3 and older, including all earlier versions.
4
What can an attacker achieve with CVE-2021-45342?
An attacker can achieve remote code execution by exploiting the buffer overflow vulnerability in the CDataList component.
5
Is there a known exploit for CVE-2021-45342?
Yes, there are indications that CVE-2021-45342 could be exploited using specially crafted JWW documents.