Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.DEBIAN_DLA-3226.NASL
HistoryDec 06, 2022 - 12:00 a.m.

Debian DLA-3226-1 : cgal - LTS security update

2022-12-0600:00:00
This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
5
debian
dla-3226-1
cgal
code execution
vulnerabilities
nef polygon-parsing

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.009 Low

EPSS

Percentile

82.9%

JSON

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3226 advisory.

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read.
    An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-28601)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_vertex() Halfedge_of[]. (CVE-2020-28602)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge() e->set_prev(). (CVE-2020-28603)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge() e->set_next(). (CVE-2020-28604)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge() e->set_vertex(). (CVE-2020-28605)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge() e->set_face(). (CVE-2020-28606)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face() set_halfedge(). (CVE-2020-28607)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face() store_fc(). (CVE-2020-28608)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face() store_iv(). (CVE-2020-28609)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SM_io_parser.h SM_io_parser<Decorator_>::read_vertex() set_face(). (CVE-2020-28610)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SM_io_parser.h SM_io_parser<Decorator_>::read_vertex() set_first_out_edge(). (CVE-2020-28611)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->svertices_begin(). (CVE-2020-28612)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->svertices_last(). (CVE-2020-28613)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->shalfedges_begin(). (CVE-2020-28614)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->shalfedges_last(). (CVE-2020-28615)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->sfaces_begin(). (CVE-2020-28616)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->sfaces_last(). (CVE-2020-28617)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->shalfloop(). (CVE-2020-28618)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->twin(). (CVE-2020-28619)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->center_vertex():. (CVE-2020-28620)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->out_sedge(). (CVE-2020-28621)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->incident_sface(). (CVE-2020-28622)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->twin(). (CVE-2020-28623)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SEdge_of. (CVE-2020-28624)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SLoop_of. (CVE-2020-28625)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->incident_volume(). (CVE-2020-28626)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() ch->shell_entry_objects(). (CVE-2020-28627)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() seh->twin(). (CVE-2020-28628)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->sprev(). (CVE-2020-28629)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->snext(). (CVE-2020-28630)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->source(). (CVE-2020-28631)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->incident_sface(). (CVE-2020-28632)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev(). (CVE-2020-28633)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next(). (CVE-2020-28634)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->facet(). (CVE-2020-28635)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->twin() An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-28636)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->incident_sface. An attacker can provide malicious input to trigger this vulnerability.
    (CVE-2020-35628)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sloop() slh->facet(). (CVE-2020-35629)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->center_vertex(). (CVE-2020-35630)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() SD.link_as_face_cycle(). (CVE-2020-35631)

  • Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Edge_of. (CVE-2020-35632)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() store_sm_boundary_item() Edge_of.A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35633)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Sloop_of. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35634)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35635)

  • A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution.
    An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35636)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dla-3226. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(168418);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/09/20");

  script_cve_id(
    "CVE-2020-28601",
    "CVE-2020-28602",
    "CVE-2020-28603",
    "CVE-2020-28604",
    "CVE-2020-28605",
    "CVE-2020-28606",
    "CVE-2020-28607",
    "CVE-2020-28608",
    "CVE-2020-28609",
    "CVE-2020-28610",
    "CVE-2020-28611",
    "CVE-2020-28612",
    "CVE-2020-28613",
    "CVE-2020-28614",
    "CVE-2020-28615",
    "CVE-2020-28616",
    "CVE-2020-28617",
    "CVE-2020-28618",
    "CVE-2020-28619",
    "CVE-2020-28620",
    "CVE-2020-28621",
    "CVE-2020-28622",
    "CVE-2020-28623",
    "CVE-2020-28624",
    "CVE-2020-28625",
    "CVE-2020-28626",
    "CVE-2020-28627",
    "CVE-2020-28628",
    "CVE-2020-28629",
    "CVE-2020-28630",
    "CVE-2020-28631",
    "CVE-2020-28632",
    "CVE-2020-28633",
    "CVE-2020-28634",
    "CVE-2020-28635",
    "CVE-2020-28636",
    "CVE-2020-35628",
    "CVE-2020-35629",
    "CVE-2020-35630",
    "CVE-2020-35631",
    "CVE-2020-35632",
    "CVE-2020-35633",
    "CVE-2020-35634",
    "CVE-2020-35635",
    "CVE-2020-35636"
  );

  script_name(english:"Debian DLA-3226-1 : cgal - LTS security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing one or more security-related updates.");
  script_set_attribute(attribute:"description", value:
"The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the
dla-3226 advisory.

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read.
    An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-28601)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h
    PM_io_parser<PMDEC>::read_vertex() Halfedge_of[]. (CVE-2020-28602)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h
    PM_io_parser<PMDEC>::read_hedge() e->set_prev(). (CVE-2020-28603)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h
    PM_io_parser<PMDEC>::read_hedge() e->set_next(). (CVE-2020-28604)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge()
    e->set_vertex(). (CVE-2020-28605)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h
    PM_io_parser<PMDEC>::read_hedge() e->set_face(). (CVE-2020-28606)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face()
    set_halfedge(). (CVE-2020-28607)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face()
    store_fc(). (CVE-2020-28608)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_face()
    store_iv(). (CVE-2020-28609)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SM_io_parser.h
    SM_io_parser<Decorator_>::read_vertex() set_face(). (CVE-2020-28610)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SM_io_parser.h
    SM_io_parser<Decorator_>::read_vertex() set_first_out_edge(). (CVE-2020-28611)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->svertices_begin(). (CVE-2020-28612)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->svertices_last(). (CVE-2020-28613)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->shalfedges_begin(). (CVE-2020-28614)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->shalfedges_last(). (CVE-2020-28615)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->sfaces_begin(). (CVE-2020-28616)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->sfaces_last(). (CVE-2020-28617)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_vertex() vh->shalfloop(). (CVE-2020-28618)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge()
    eh->twin(). (CVE-2020-28619)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge()
    eh->center_vertex():. (CVE-2020-28620)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge()
    eh->out_sedge(). (CVE-2020-28621)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge()
    eh->incident_sface(). (CVE-2020-28622)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_facet() fh->twin(). (CVE-2020-28623)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SEdge_of. (CVE-2020-28624)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SLoop_of. (CVE-2020-28625)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_facet() fh->incident_volume(). (CVE-2020-28626)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_volume() ch->shell_entry_objects(). (CVE-2020-28627)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_volume() seh->twin(). (CVE-2020-28628)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->sprev(). (CVE-2020-28629)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->snext(). (CVE-2020-28630)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->source(). (CVE-2020-28631)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->incident_sface(). (CVE-2020-28632)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->prev(). (CVE-2020-28633)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->next(). (CVE-2020-28634)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sedge() seh->facet(). (CVE-2020-28635)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->twin() An
    attacker can provide malicious input to trigger this vulnerability. (CVE-2020-28636)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop()
    slh->incident_sface. An attacker can provide malicious input to trigger this vulnerability.
    (CVE-2020-35628)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sloop() slh->facet(). (CVE-2020-35629)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sface() sfh->center_vertex(). (CVE-2020-35630)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sface() SD.link_as_face_cycle(). (CVE-2020-35631)

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal
    CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which
    could lead to code execution. An attacker can provide malicious input to trigger any of these
    vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h
    SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Edge_of. (CVE-2020-35632)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface()
    store_sm_boundary_item() Edge_of.A specially crafted malformed file can lead to an out-of-bounds read and
    type confusion, which could lead to code execution. An attacker can provide malicious input to trigger
    this vulnerability. (CVE-2020-35633)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.
    An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface()
    sfh->boundary_entry_objects Sloop_of. A specially crafted malformed file can lead to an out-of-bounds read
    and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger
    this vulnerability. (CVE-2020-35634)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1
    in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read. A
    specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to
    code execution. An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35635)

  - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1
    in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB read. A specially crafted
    malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution.
    An attacker can provide malicious input to trigger this vulnerability. (CVE-2020-35636)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985671");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/cgal");
  script_set_attribute(attribute:"see_also", value:"https://www.debian.org/lts/security/2022/dla-3226");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28601");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28602");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28603");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28604");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28605");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28606");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28607");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28608");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28609");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28610");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28611");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28612");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28613");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28614");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28615");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28616");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28617");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28618");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28619");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28620");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28621");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28622");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28623");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28624");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28625");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28626");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28627");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28628");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28629");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28630");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28631");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28632");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28633");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28634");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28635");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-28636");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35628");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35629");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35630");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35631");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35632");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35633");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35634");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35635");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-35636");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/buster/cgal");
  script_set_attribute(attribute:"solution", value:
"Upgrade the cgal packages.

For Debian 10 buster, these problems have been fixed in version 4.13-1+deb10u1.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-35636");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/03/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2022/12/06");
  script_set_attribute(attribute:"plugin_publication_date", value:"2022/12/06");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal-demo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal-ipelets");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal-qt5-13");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal-qt5-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libcgal13");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);

var debian_release = get_kb_item('Host/Debian/release');
if ( isnull(debian_release) ) audit(AUDIT_OS_NOT, 'Debian');
debian_release = chomp(debian_release);
if (! preg(pattern:"^(10)\.[0-9]+", string:debian_release)) audit(AUDIT_OS_NOT, 'Debian 10.0', 'Debian ' + debian_release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);

var pkgs = [
    {'release': '10.0', 'prefix': 'libcgal-demo', 'reference': '4.13-1+deb10u1'},
    {'release': '10.0', 'prefix': 'libcgal-dev', 'reference': '4.13-1+deb10u1'},
    {'release': '10.0', 'prefix': 'libcgal-ipelets', 'reference': '4.13-1+deb10u1'},
    {'release': '10.0', 'prefix': 'libcgal-qt5-13', 'reference': '4.13-1+deb10u1'},
    {'release': '10.0', 'prefix': 'libcgal-qt5-dev', 'reference': '4.13-1+deb10u1'},
    {'release': '10.0', 'prefix': 'libcgal13', 'reference': '4.13-1+deb10u1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var _release = NULL;
  var prefix = NULL;
  var reference = NULL;
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (_release && prefix && reference) {
    if (deb_check(release:_release, prefix:prefix, reference:reference)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : deb_report_get()
  );
  exit(0);
}
else
{
  var tested = deb_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'libcgal-demo / libcgal-dev / libcgal-ipelets / libcgal-qt5-13 / etc');
}
VendorProductVersionCPE
debiandebian_linuxlibcgal-qt5-devp-cpe:/a:debian:debian_linux:libcgal-qt5-dev
debiandebian_linuxlibcgal13p-cpe:/a:debian:debian_linux:libcgal13
debiandebian_linux10.0cpe:/o:debian:debian_linux:10.0
debiandebian_linuxlibcgal-demop-cpe:/a:debian:debian_linux:libcgal-demo
debiandebian_linuxlibcgal-devp-cpe:/a:debian:debian_linux:libcgal-dev
debiandebian_linuxlibcgal-ipeletsp-cpe:/a:debian:debian_linux:libcgal-ipelets
debiandebian_linuxlibcgal-qt5-13p-cpe:/a:debian:debian_linux:libcgal-qt5-13

References

Related

osv 23
debian 2
openvas 6
gentoo 1
talos 1
nessus 3
mageia 2
fedora 2
cvelist 26
ubuntucve 24
prion 26
cnvd 4
nvd 28
cve 25
debiancve 26
osv
osv
cgal - security update
2021-05-04 00:00:00
cgal - security update
2022-12-06 00:00:00
CVE-2020-28610
2022-04-18 17:15:12
debian
debian
[SECURITY] [DLA 3226-1] cgal security update
2022-12-06 12:09:07
[SECURITY] [DLA 2649-1] cgal security update
2021-05-05 05:18:36
openvas
openvas
Debian: Security Advisory (DLA-2649-1)
2021-05-06 00:00:00
Debian: Security Advisory (DLA-3226-1)
2022-12-07 00:00:00
Mageia: Security Advisory (MGASA-2021-0239)
2022-01-28 00:00:00
gentoo
gentoo
CGAL: Multiple Vulnerabilities
2023-05-30 00:00:00
talos
talos
CGAL libcgal multiple code execution vulnerabilities in Nef polygon-parsing code
2021-02-24 00:00:00
nessus
nessus
GLSA-202305-34 : CGAL: Multiple Vulnerabilities
2023-05-30 00:00:00
Debian DLA-2649-1 : cgal security update
2021-05-05 00:00:00
Fedora 33 : CGAL (2021-9de542ab4c)
2021-03-26 00:00:00
mageia
mageia
Updated cgal packages fix security vulnerabilities
2021-06-08 19:46:03
Updated cgal packages fix security vulnerabilities
2021-06-08 19:46:03
fedora
fedora
[SECURITY] Fedora 34 Update: CGAL-5.2.1-1.fc34
2021-03-23 00:18:18
[SECURITY] Fedora 33 Update: CGAL-5.1.3-1.fc33
2021-03-26 17:55:29
cvelist
cvelist
CVE-2020-28603
2022-04-18 00:00:00
CVE-2020-28605
2022-04-18 00:00:00
CVE-2020-28618
2022-04-18 00:00:00
ubuntucve
ubuntucve
CVE-2020-28629
2022-04-18 00:00:00
CVE-2020-28612
2022-04-18 00:00:00
CVE-2020-28603
2022-04-18 00:00:00
prion
prion
Type confusion
2022-04-18 17:15:00
Type confusion
2022-04-18 17:15:00
Type confusion
2022-04-18 17:15:00
cnvd
cnvd
CGAL libcgal Code Execution Vulnerability (CNVD-2022-61373)
2022-04-25 00:00:00
CGAL libcgal Code Execution Vulnerability (CNVD-2022-61368)
2022-04-25 00:00:00
CGAL libcgal Code Execution Vulnerability (CNVD-2022-61367)
2022-04-25 00:00:00
nvd
nvd
CVE-2020-28611
2022-04-18 17:15:12
CVE-2020-28616
2022-04-18 17:15:13
CVE-2020-28603
2022-04-18 17:15:12
cve
cve
CVE-2020-28604
2022-04-18 17:15:12
CVE-2020-28605
2022-04-18 17:15:12
CVE-2020-28623
2022-04-18 17:15:13
debiancve
debiancve
CVE-2020-28619
2022-04-18 17:15:13
CVE-2020-28603
2022-04-18 17:15:12
CVE-2020-28605
2022-04-18 17:15:12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.009 Low

EPSS

Percentile

82.9%

JSON
Related for DEBIAN_DLA-3226.NASL
osv23debian2openvas6gentoo1talos1nessus3mageia2fedora2cvelist26ubuntucve24prion26cnvd4nvd28cve25debiancve26