CVE-2018-19105 — Out-of-bounds Write in Librecad

CWE-787 — Out-of-bounds Write9 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 45.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
LibrecadDebian Librecad
Timeline
PublishedNov 8
Latest updateMar 15

Description

LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/librecad< librecad 2.1.3-1.2 (bookworm)
▶Debianlibrecad/librecad< 2.1.3-1.2+3
▶Ubuntulibrecad/librecad< 2.1.3-1.2+deb10u1build0.20.04.1+2

🔴Vulnerability Details

3
OSV
librecad vulnerabilities↗2023-03-15
▶
GHSA
GHSA-jfgr-wr44-g2mf: LibreCAD 2↗2022-05-14
▶
OSV
CVE-2018-19105: LibreCAD 2↗2018-11-08
▶

📋Vendor Advisories

2
Ubuntu
LibreCAD vulnerabilities↗2023-03-15
▶
Debian
CVE-2018-19105: librecad - LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 ...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-19105 librecad: Write access violation resulting in DoS [epel-7]↗2018-11-08
▶
Bugzilla
CVE-2018-19105 librecad: Write access violation resulting in DoS↗2018-11-08
▶
Bugzilla
CVE-2018-19105 librecad: Write access violation resulting in DoS [fedora-all]↗2018-11-08
▶
CVE-2018-19105 — Out-of-bounds Write in Debian Librecad | cvebase