Lucene search
Veracode Vulnerability DatabaseVERACODE:29498HistoryFeb 26, 2021 - 1:47 a.m.
Arbitrary Code Execution
2021-02-2601:47:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
59.1%
openscad is vulnerable to arbitrary code execution. A stack-based buffer overflow vulnerability in the import_stl.cc:import_stl() functionality allows an attacker to execute arbitrary code on the host OS via a malicious STL file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openscad:sid | eq | 2019.05-3+b1 | |
| openscad:sid | eq | 2019.05-3+b1 |
References
lists.fedoraproject.org/archives/list/[email protected]/message/AFXQZK6BAYARVVWBBXDKPVPN3N77PPDX/
lists.fedoraproject.org/archives/list/[email protected]/message/KRHYUWXQ7QQIC6TXDYYLYFFF7B7L3EBD/
security-tracker.debian.org/tracker/CVE-2020-28599
security.gentoo.org/glsa/202107-35
talosintelligence.com/vulnerability_reports/TALOS-2020-1223
www.talosintelligence.com/vulnerability_reports/TALOS-2020-1224
Related
mageia
mageia
Updated openscad package fixes a security vulnerability
2021-03-27 17:27:02
fedora
fedora
[SECURITY] Fedora 32 Update: openscad-2019.05-13.fc32
2021-03-05 19:23:55
[SECURITY] Fedora 33 Update: openscad-2019.05-13.fc33
2021-03-05 19:17:27
nessus
nessus
GLSA-202107-35 : OpenSCAD: Buffer overflow
2022-01-24 00:00:00
Fedora 33 : openscad (2021-8349f28cb9)
2021-03-08 00:00:00
Fedora 32 : openscad (2021-793da7882b)
2021-03-08 00:00:00
osv
osv
CVE-2020-28599
2021-02-24 16:15:14
cvelist
cvelist
CVE-2020-28599
2021-02-24 15:58:26
prion
prion
Stack overflow
2021-02-24 16:15:00
ubuntucve
ubuntucve
CVE-2020-28599
2021-02-24 00:00:00
debiancve
debiancve
CVE-2020-28599
2021-02-24 16:15:14
openvas
openvas
Fedora: Security Advisory for openscad (FEDORA-2021-793da7882b)
2021-03-06 00:00:00
Mageia: Security Advisory (MGASA-2021-0157)
2022-01-28 00:00:00
Fedora: Security Advisory for openscad (FEDORA-2021-8349f28cb9)
2021-03-06 00:00:00
talos
talos
gentoo
gentoo
OpenSCAD: Buffer overflow
2021-07-15 00:00:00
nvd
nvd
CVE-2020-28599
2021-02-24 16:15:14
cve
cve
CVE-2020-28599
2021-02-24 16:15:14