CVE catalog

CVE-2021-45343

librecad: CVE-2021-45343

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.90% · Oct 25, 2026

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibrecadsid2.2.0.2-3fixed
Debianlibrecadforky2.2.0.2-3fixed
Debianlibrecadtrixie2.2.0.2-1fixed
Debianlibrecadbookworm2.2.0-1fixed
Ubuntulibrecadpro2.1.2-1vulnerable
Ubuntulibrecadpro2.1.2-1ubuntu0.1~esm1fixed
Ubuntulibrecad18.042.1.2-1vulnerable
Ubuntulibrecad18.042.1.2-1ubuntu0.1fixed
Ubuntulibrecad20.042.1.3-1.2vulnerable
Ubuntulibrecad20.042.1.3-1.2build1vulnerable
Ubuntulibrecad20.042.1.3-1.2+deb10u1build0.20.04.1fixed
Ubuntulibrecad22.042.1.3-1.3vulnerable
Ubuntulibrecad22.042.1.3-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibrecadsourcesid2.1.3-3not yet assignedNot reported[1004518]
Debianlibrecadsourceforky2.1.3-3not yet assignedNot reported[1004518]
Debianlibrecadsourcetrixie2.1.3-3not yet assignedNot reported[1004518]
Debianlibrecadsourcebookworm2.1.3-3not yet assignedNot reported[1004518]
Ubuntulibrecaddebpro2.1.2-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2021-45343Not reported
Ubuntulibrecaddeb18.042.1.2-1ubuntu0.1Not reportedUBUNTU-CVE-2021-45343Not reported
Ubuntulibrecaddeb20.042.1.3-1.2+deb10u1build0.20.04.1Not reportedUBUNTU-CVE-2021-45343Not reported
Ubuntulibrecaddeb22.042.1.3-3Not reportedUBUNTU-CVE-2021-45343Not reported

[Debian bug #1004518]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [librecad]Fixed
    Details (2)

    • 2.2.0-1 · amd64 · bookworm

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · bookworm; dsa · librecad · debian · 12

    • 2.2.0-1 · arm64 · bookworm

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · bookworm; dsa · librecad · debian · 12

  • [librecad-data]Fixed

    Source package: [librecad]

    Details (2)

    • 2.2.0-1 · all · bookworm

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · bookworm; dsa · librecad · debian · 12

    • 2.2.0-1 · all · bookworm

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · bookworm; dsa · librecad · debian · 12

[Debian 13 (Trixie)]

  • [librecad]Fixed

    Source package: [librecad]

    Details (2)

    • 2.2.0.2-1+b1 · amd64 · trixie

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · 13

    • 2.2.0.2-1+b2 · arm64 · trixie

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · 13

  • [librecad-data]Fixed

    Source package: [librecad]

    Details (2)

    • 2.2.0.2-1 · all · trixie

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · 13

    • 2.2.0.2-1 · all · trixie

      Fixed · Fixed: 2.1.3-3

      dsa · librecad · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]