Lucene search
Veracode Vulnerability DatabaseVERACODE:34296HistoryFeb 20, 2022 - 12:23 p.m.
Out-of-Bounds Access
2022-02-2012:23:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
24.1%
openscad is vulnerable to out-of-bounds access. The vulnerability exists in ADD_LINE function in dxfdata.cc due to missing validations in DXF import which allows an attacker to cause an out of bound writes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openscad:sid | eq | 2021.01-2 | |
| openscad:sid | eq | 2019.05-3+b1 | |
| openscad:sid | eq | 2021.01-2 | |
| openscad:sid | eq | 2019.05-3+b1 |
References
bugzilla.redhat.com/show_bug.cgi?id=2050695
github.com/openscad/openscad/commit/00a4692989c4e2f191525f73f24ad8727bacdf41
github.com/openscad/openscad/commit/52ce0f7ad1a7675cd6388308ef8d4ef241fbb2b8
github.com/openscad/openscad/commit/770e3234cbfe66edbc0333f796b46d36a74aa652
github.com/openscad/openscad/issues/4037
github.com/openscad/openscad/pull/4090
security-tracker.debian.org/tracker/CVE-2022-0496
Related
debiancve
debiancve
CVE-2022-0496
2022-08-29 15:15:09
ubuntucve
ubuntucve
CVE-2022-0496
2022-08-29 00:00:00
prion
prion
Format string
2022-08-29 15:15:00
osv
osv
CVE-2022-0496
2022-08-29 15:15:09
cve
cve
CVE-2022-0496
2022-08-29 15:15:09
alpinelinux
alpinelinux
CVE-2022-0496
2022-08-29 15:15:09
cvelist
cvelist
CVE-2022-0496
2022-08-29 14:03:04
nvd
nvd
CVE-2022-0496
2022-08-29 15:15:09
fedora
fedora
[SECURITY] Fedora 35 Update: openscad-2021.01-8.fc35
2022-04-14 16:07:23
[SECURITY] Fedora 34 Update: openscad-2021.01-8.fc34
2022-04-14 16:06:54
[SECURITY] Fedora 36 Update: openscad-2021.01-8.fc36
2022-05-07 04:51:38
altlinux
altlinux
Security fix for the ALT Linux 10 package openscad version 2021.01-alt4
2022-06-23 00:00:00
openvas
openvas
Fedora: Security Advisory for openscad (FEDORA-2022-3012e64f8c)
2022-04-15 00:00:00
Fedora: Security Advisory for openscad (FEDORA-2022-1cf6eefd62)
2022-05-08 00:00:00
Mageia: Security Advisory (MGASA-2022-0148)
2022-04-25 00:00:00
mageia
mageia
Updated openscad packages fix security vulnerability
2022-04-22 20:07:29