LibreOffice librevenge pre-R13 DWG Parser Memory Exhaustion DoS Vulnerability Fix & POC

Vulnerability Summary Overview An unbounded memory allocation occurs during the parsing of crafted pre-R13 DWG files within the function, leading to a Denial of Service (OOM). This vulnerability stems from a flaw in the parsing logic for legacy DWG files (R13 and earlier). An attacker can construct a malicious file to trigger infinite memory growth, eventually exhausting system resources. Scope of Impact Affected Component: function in the library Trigger Condition: Parsing specifically crafted pre-R13 DWG files Affected Versions: Not explicitly specified, but involves LibreOffice modules dependent on CVSS Score: 7.5 (High Severity) Vulnerability Type: Denial of Service (DoS), Memory Exhaustion Remediation 1. Fix Commit: (2024-05-16) 2. Fix Details: - Added boundary checks during the parsing of pre-R13 DWG files - Limited recursion depth and object count to prevent infinite loops or memory explosions - Implemented exception handling mechanisms to abort parsing early upon detection of anomalous structures POC / Exploitation Code > Note: A complete POC requires construction based on specific file structures; the above is a simplified illustration. Actual exploitation requires precise control over file headers, object tables, and recursive reference chains. Additional Information Vulnerability ID: CVE-2024-XXXX (Pending Assignment) Reporter: Anonymous Researcher Fix Status: Fixed (commit a8e9f0d) Recommended Actions: Upgrade to the latest stable version and avoid parsing DWG files from untrusted sources.

Goal Reached Thanks to every supporter — we hit 100%!

LibreOffice librevenge pre-R13 DWG Parser Memory Exhaustion DoS Vulnerability Fix & POC

More from this source