Vulnerabilities > CVE-2019-20014 - Double Free vulnerability in multiple products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

nessus

NVD

Published: 2019-12-27

Updated: 2020-05-22

Summary

An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.

Vulnerable Configurations

Part	Description	Count
Application	Gnu GNU Libredwg 0.3 GNU Libredwg 0.4.361 GNU Libredwg 0.4.377 GNU Libredwg 0.4.401 GNU Libredwg 0.4.414 GNU Libredwg 0.4.442 GNU Libredwg 0.4.445 GNU Libredwg 0.4.469 GNU Libredwg 0.4.477 GNU Libredwg 0.4.480 GNU Libredwg 0.4.491 GNU Libredwg 0.4.502 GNU Libredwg 0.4.512 GNU Libredwg 0.4.515 GNU Libredwg 0.4.523 GNU Libredwg 0.4.527 GNU Libredwg 0.4.535 GNU Libredwg 0.4.544 GNU Libredwg 0.4.549 GNU Libredwg 0.4.560 GNU Libredwg 0.4.569 GNU Libredwg 0.4.573 GNU Libredwg 0.4.586 GNU Libredwg 0.4.591 GNU Libredwg 0.4.593 GNU Libredwg 0.4.601 GNU Libredwg 0.4.603 GNU Libredwg 0.4.607 GNU Libredwg 0.4.615 GNU Libredwg 0.4.618 GNU Libredwg 0.4.624 GNU Libredwg 0.4.631 GNU Libredwg 0.4.635 GNU Libredwg 0.4.637 GNU Libredwg 0.4.649 GNU Libredwg 0.4.651 GNU Libredwg 0.4.657 GNU Libredwg 0.4.660 GNU Libredwg 0.4.666 GNU Libredwg 0.4.675 GNU Libredwg 0.4.680 GNU Libredwg 0.4.687 GNU Libredwg 0.4.696 GNU Libredwg 0.4.697 GNU Libredwg 0.4.701 GNU Libredwg 0.4.710 GNU Libredwg 0.4.722 GNU Libredwg 0.4.734 GNU Libredwg 0.4.748 GNU Libredwg 0.4.755 GNU Libredwg 0.4.788 GNU Libredwg 0.4.790 GNU Libredwg 0.4.793 GNU Libredwg 0.4.796 GNU Libredwg 0.4.799 GNU Libredwg 0.4.804 GNU Libredwg 0.4.809 GNU Libredwg 0.4.810 GNU Libredwg 0.4.813 GNU Libredwg 0.4.816 GNU Libredwg 0.4.825 GNU Libredwg 0.4.828 GNU Libredwg 0.4.830 GNU Libredwg 0.4.834 GNU Libredwg 0.4.837 GNU Libredwg 0.4.840 GNU Libredwg 0.4.845 GNU Libredwg 0.4.846 GNU Libredwg 0.4.848 GNU Libredwg 0.4.872 GNU Libredwg 0.4.882 GNU Libredwg 0.4.885 GNU Libredwg 0.4.894 GNU Libredwg 0.4.898 GNU Libredwg 0.4.900 GNU Libredwg 0.4.911 GNU Libredwg 0.4.924 GNU Libredwg 0.4.927 GNU Libredwg 0.4.928 GNU Libredwg 0.4.929 GNU Libredwg 0.4.930 GNU Libredwg 0.4.931 GNU Libredwg 0.4.935 GNU Libredwg 0.4.938 GNU Libredwg 0.4.945 GNU Libredwg 0.4.946 GNU Libredwg 0.4.952 GNU Libredwg 0.4.954 GNU Libredwg 0.5 GNU Libredwg 0.5.0.1099 GNU Libredwg 0.5.0.1100 GNU Libredwg 0.5.0.1105 GNU Libredwg 0.5.0.1107 GNU Libredwg 0.5.0.1110 GNU Libredwg 0.5.0.1119 GNU Libredwg 0.5.0.1125 GNU Libredwg 0.5.0.1128 GNU Libredwg 0.5.0.1131 GNU Libredwg 0.5.0.1132 GNU Libredwg 0.5.0.1138 GNU Libredwg 0.5.0.1141 GNU Libredwg 0.5.0.1144 GNU Libredwg 0.5.0.1148 GNU Libredwg 0.5.0.1150 GNU Libredwg 0.5.0.1156 GNU Libredwg 0.5.0.1158 GNU Libredwg 0.5.0.1161 GNU Libredwg 0.5.0.1176 GNU Libredwg 0.5.0.1181 GNU Libredwg 0.5.0.1192 GNU Libredwg 0.5.0.1194 GNU Libredwg 0.5.0.1197 GNU Libredwg 0.5.965 GNU Libredwg 0.5.967 GNU Libredwg 0.5.970 GNU Libredwg 0.5.976 GNU Libredwg 0.5.979 GNU Libredwg 0.5.982 GNU Libredwg 0.5.988 GNU Libredwg 0.5.1006 GNU Libredwg 0.5.1009 GNU Libredwg 0.5.1013 GNU Libredwg 0.5.1014 GNU Libredwg 0.5.1020 GNU Libredwg 0.5.1022 GNU Libredwg 0.5.1027 GNU Libredwg 0.5.1031 GNU Libredwg 0.5.1036 GNU Libredwg 0.5.1043 GNU Libredwg 0.5.1048 GNU Libredwg 0.5.1056 GNU Libredwg 0.5.1060 GNU Libredwg 0.5.1063 GNU Libredwg 0.5.1067 GNU Libredwg 0.5.1070 GNU Libredwg 0.5.1074 GNU Libredwg 0.5.1078 GNU Libredwg 0.5.1082 GNU Libredwg 0.5.1093 GNU Libredwg 0.5.1098 GNU Libredwg 0.6 GNU Libredwg 0.6.0.1202 GNU Libredwg 0.6.0.1203 GNU Libredwg 0.6.0.1205 GNU Libredwg 0.6.0.1206 GNU Libredwg 0.6.1 GNU Libredwg 0.6.1.1208 GNU Libredwg 0.6.1.1210 GNU Libredwg 0.6.1.1213 GNU Libredwg 0.6.1.1216 GNU Libredwg 0.6.2 GNU Libredwg 0.6.2.1225 GNU Libredwg 0.6.2.1227 GNU Libredwg 0.6.2.1234 GNU Libredwg 0.6.2.1235 GNU Libredwg 0.6.2.1238 GNU Libredwg 0.6.2.1239 GNU Libredwg 0.6.2.1247 GNU Libredwg 0.6.2.1248 GNU Libredwg 0.6.2.1251 GNU Libredwg 0.6.2.1261 GNU Libredwg 0.6.2.1263 GNU Libredwg 0.6.2.1267 GNU Libredwg 0.6.2.1268 GNU Libredwg 0.6.2.1269 GNU Libredwg 0.6.2.1270 GNU Libredwg 0.6.2.1273 GNU Libredwg 0.6.2.1276 GNU Libredwg 0.7 GNU Libredwg 0.7.1288 GNU Libredwg 0.7.1289 GNU Libredwg 0.7.1290 GNU Libredwg 0.7.1291 GNU Libredwg 0.7.1293 GNU Libredwg 0.7.1294 GNU Libredwg 0.7.1296 GNU Libredwg 0.7.1297 GNU Libredwg 0.7.1303 GNU Libredwg 0.7.1306 GNU Libredwg 0.7.1312 GNU Libredwg 0.7.1316 GNU Libredwg 0.7.1321 GNU Libredwg 0.7.1323 GNU Libredwg 0.7.1333 GNU Libredwg 0.7.1340 GNU Libredwg 0.7.1350 GNU Libredwg 0.7.1357 GNU Libredwg 0.7.1360 GNU Libredwg 0.7.1372 GNU Libredwg 0.7.1375 GNU Libredwg 0.7.1386 GNU Libredwg 0.7.1393 GNU Libredwg 0.7.1397 GNU Libredwg 0.7.1403 GNU Libredwg 0.7.1404 GNU Libredwg 0.7.1419 GNU Libredwg 0.7.1423 GNU Libredwg 0.7.1428 GNU Libredwg 0.7.1444 GNU Libredwg 0.7.1445 GNU Libredwg 0.7.1450 GNU Libredwg 0.7.1465 GNU Libredwg 0.7.1467 GNU Libredwg 0.7.1475 GNU Libredwg 0.7.1491 GNU Libredwg 0.7.1496 GNU Libredwg 0.7.1501 GNU Libredwg 0.7.1533 GNU Libredwg 0.7.1539 GNU Libredwg 0.7.1543 GNU Libredwg 0.7.1546 GNU Libredwg 0.7.1568 GNU Libredwg 0.7.1571 GNU Libredwg 0.7.1579 GNU Libredwg 0.7.1591 GNU Libredwg 0.7.1597 GNU Libredwg 0.7.1600 GNU Libredwg 0.7.1603 GNU Libredwg 0.7.1606 GNU Libredwg 0.7.1608 GNU Libredwg 0.7.1611 GNU Libredwg 0.7.1615 GNU Libredwg 0.7.1619 GNU Libredwg 0.7.1621 GNU Libredwg 0.7.1624 GNU Libredwg 0.7.1627 GNU Libredwg 0.7.1629 GNU Libredwg 0.7.1632 GNU Libredwg 0.7.1643 GNU Libredwg 0.7.1645 GNU Libredwg 0.7.1646 GNU Libredwg 0.7.1654 GNU Libredwg 0.7.1701 GNU Libredwg 0.7.1702 GNU Libredwg 0.7.1709 GNU Libredwg 0.7.1713 GNU Libredwg 0.7.1722 GNU Libredwg 0.7.1725 GNU Libredwg 0.7.1728 GNU Libredwg 0.7.1734 GNU Libredwg 0.8 GNU Libredwg 0.8.1742 GNU Libredwg 0.8.1746 GNU Libredwg 0.8.1750 GNU Libredwg 0.8.1757 GNU Libredwg 0.8.1763 GNU Libredwg 0.8.1766 GNU Libredwg 0.8.1768 GNU Libredwg 0.8.1773 GNU Libredwg 0.8.1777 GNU Libredwg 0.8.1790 GNU Libredwg 0.8.1795 GNU Libredwg 0.8.1797 GNU Libredwg 0.8.1803 GNU Libredwg 0.8.1804 GNU Libredwg 0.8.1806 GNU Libredwg 0.8.1807 GNU Libredwg 0.8.1813 GNU Libredwg 0.8.1816 GNU Libredwg 0.8.1819 GNU Libredwg 0.8.1821 GNU Libredwg 0.8.1823 GNU Libredwg 0.8.1824 GNU Libredwg 0.8.1832 GNU Libredwg 0.8.1833 GNU Libredwg 0.8.1834 GNU Libredwg 0.8.1835 GNU Libredwg 0.8.1837 GNU Libredwg 0.8.1842 GNU Libredwg 0.8.1847 GNU Libredwg 0.8.1851 GNU Libredwg 0.8.1853 GNU Libredwg 0.8.1854 GNU Libredwg 0.8.1855 GNU Libredwg 0.8.1856 GNU Libredwg 0.8.1857 GNU Libredwg 0.8.1858 GNU Libredwg 0.8.1859 GNU Libredwg 0.8.1861 GNU Libredwg 0.8.1863 GNU Libredwg 0.8.1864 GNU Libredwg 0.8.1865 GNU Libredwg 0.8.1888 GNU Libredwg 0.8.1896 GNU Libredwg 0.8.1898 GNU Libredwg 0.8.1899 GNU Libredwg 0.8.1902 GNU Libredwg 0.8.1903 GNU Libredwg 0.8.1928 GNU Libredwg 0.8.1933 GNU Libredwg 0.8.1935 GNU Libredwg 0.8.1937 GNU Libredwg 0.8.1938 GNU Libredwg 0.8.1941 GNU Libredwg 0.8.1942 GNU Libredwg 0.8.1944 GNU Libredwg 0.8.1945 GNU Libredwg 0.8.1949 GNU Libredwg 0.8.1956 GNU Libredwg 0.8.1958 GNU Libredwg 0.8.1969 GNU Libredwg 0.8.1999 GNU Libredwg 0.8.2009 GNU Libredwg 0.8.2012 GNU Libredwg 0.8.2018 GNU Libredwg 0.8.2023 GNU Libredwg 0.8.2031 GNU Libredwg 0.8.2036 GNU Libredwg 0.8.2059 GNU Libredwg 0.8.2063 GNU Libredwg 0.8.2074 GNU Libredwg 0.8.2085 GNU Libredwg 0.8.2100 GNU Libredwg 0.8.2107 GNU Libredwg 0.8.2112 GNU Libredwg 0.8.2124 GNU Libredwg 0.8.2130 GNU Libredwg 0.8.2144 GNU Libredwg 0.8.2146 GNU Libredwg 0.8.2148 GNU Libredwg 0.8.2155 GNU Libredwg 0.8.2159 GNU Libredwg 0.8.2163 GNU Libredwg 0.8.2169 GNU Libredwg 0.8.2171 GNU Libredwg 0.8.2184 GNU Libredwg 0.8.2187 GNU Libredwg 0.8.2194 GNU Libredwg 0.8.2197 GNU Libredwg 0.8.2212 GNU Libredwg 0.8.2225 GNU Libredwg 0.8.2227 GNU Libredwg 0.8.2233 GNU Libredwg 0.8.2238 GNU Libredwg 0.8.2261 GNU Libredwg 0.8.2298 GNU Libredwg 0.8.2308 GNU Libredwg 0.8.2320 GNU Libredwg 0.8.2323 GNU Libredwg 0.8.2327 GNU Libredwg 0.8.2337 GNU Libredwg 0.8.2341 GNU Libredwg 0.8.2344 GNU Libredwg 0.8.2347 GNU Libredwg 0.8.2349 GNU Libredwg 0.8.2352 GNU Libredwg 0.8.2355 GNU Libredwg 0.8.2358 GNU Libredwg 0.9 GNU Libredwg 0.9.1 GNU Libredwg 0.9.1.2427 GNU Libredwg 0.9.1.2429 GNU Libredwg 0.9.1.2443 GNU Libredwg 0.9.1.2444 GNU Libredwg 0.9.1.2449 GNU Libredwg 0.9.1.2450 GNU Libredwg 0.9.1.2451 GNU Libredwg 0.9.2 GNU Libredwg 0.9.2.2455 GNU Libredwg 0.9.2.2458 GNU Libredwg 0.9.2.2460 GNU Libredwg 0.9.2.2461 GNU Libredwg 0.9.2.2464 GNU Libredwg 0.9.2.2465 GNU Libredwg 0.9.2.2470	365
Application	Opensuse Opensuse Backports SLE 15.0	1
OS	Opensuse Opensuse Leap 15.1	1

Common Weakness Enumeration (CWE)

CWE-415 - Double Free

Nessus

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2020-68.NASL
description	This update for libredwg fixes the following issues : libredwg was updated to release 0.9.3 : - Added the -x,--extnames option to dwglayers for r13-r14 DWGs. - Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle for r13. - Add DICTIONARY.itemhandles[] for r13 and r14. - Fixed some dwglayers NULL pointer derefs, and flush its output for each layer. - Added several overflow checks from fuzzing [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826], [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828], [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832] - Disallow illegal SPLINE scenarios [CVE-2019-20009, boo#1159824] Update to release 0.9.1 : - Fixed more NULL pointer dereferences, overflows, hangs and memory leaks for fuzzed (i.e. illegal) DWGs. Update to release 0.9 [boo#1154080] : - Added the DXF importer, using the new dynapi and the r2000 encoder. Only for r2000 DXFs. - Added utf8text conversion functions to the dynapi. - Added 3DSOLID encoder. - Added APIs to find handles for names, searching in tables and dicts. - API breaking changes - see NEWS file in package. - Fixed NULL pointer dereferences, and memory leaks (except DXF importer) [boo#1129868, CVE-2019-9779] [boo#1129869, CVE-2019-9778] [boo#1129870, CVE-2019-9777] [boo#1129873, CVE-2019-9776] [boo#1129874, CVE-2019-9773] [boo#1129875, CVE-2019-9772] [boo#1129876, CVE-2019-9771] [boo#1129878, CVE-2019-9775] [boo#1129879, CVE-2019-9774] [boo#1129881, CVE-2019-9770] Update to 0.8 : - add a new dynamic API, read and write all header and object fields by name - API breaking changes - Fix many errors in DXF output - Fix JSON output - Many more bug fixes to handle specific object types
last seen	2020-06-01
modified	2020-06-02
plugin id	133130
published	2020-01-21
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133130
title	openSUSE Security Update : libredwg (openSUSE-2020-68)

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.