CVE-2020-6615
Fixed in a distro release EPSS 2%
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).
Products: gnu libredwg, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP1 | libredwg | 0.10-bp151.2.6.1 |
| openSUSE Leap 15.1 | libredwg | 0.10-lp151.2.6.1 |
| openSUSE Tumbleweed | libredwg | 0.11.1-1.6 |