CVE-2021-45343: Null Pointer Dereference
Published Jan 25, 2022
·Updated
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
Affected Software
6 affected componentsFixes available
debian/librecad
2.1.3-1.2+deb10u12.1.3-1.3+deb11u12.2.0-1
LibreCAD LibreCAD=2.2.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Remediation
Patch Available
Event History
Jan 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-45343?
CVE-2021-45343 has a medium severity rating due to its potential to crash the application.
2
How do I fix CVE-2021-45343?
To fix CVE-2021-45343, update LibreCAD to version 2.2.0-1 or apply the patches provided in the latest updates.
3
Which versions of LibreCAD are affected by CVE-2021-45343?
CVE-2021-45343 affects LibreCAD version 2.2.0 and earlier versions.
4
Can CVE-2021-45343 be exploited remotely?
Yes, CVE-2021-45343 can be exploited by an attacker who sends a specially crafted DXF document.
5
What operating systems are impacted by CVE-2021-45343?
CVE-2021-45343 impacts Debian and Fedora operating systems running the vulnerable versions of LibreCAD.