Denial of Service Vulnerability in LibreCAD by LibreCAD Organization
CVE-2018-19105

7.8HIGH

Key Information:

Vendor

Librecad

Status
Librecad
Vendor
CVE Published:
8 November 2018

What is CVE-2018-19105?

LibreCAD version 2.1.3 is vulnerable to a denial of service attack, allowing remote attackers to exploit the software by sending a specially crafted file. This can lead to a write access violation and cause the application to crash, potentially exposing other unspecified impacts due to the vulnerabilities in file handling. Proper measures should be taken to update the software and mitigate these risks.

References

https://code610.blogspot.com/2018/11/crashing-librecad-21...
x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019/05/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.