CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21897

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2021-21897

Fedoraproject » Extra Packages For Enterprise Linux » Version: 7.0

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0
Fedoraproject » Extra Packages For Enterprise Linux » Version: 8.0

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0
Ribbonsoft » Dxflib » Version: 3.17.0

cpe:2.3:a:ribbonsoft:dxflib:3.17.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36
Fedoraproject » Fedora » Version: 37

cpe:2.3:o:fedoraproject:fedora:37

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21897

Products

Pricing

Contact Us