The remote host is affected by the vulnerability described in GLSA-202107-35 (OpenSCAD: Buffer overflow)

    A buffer overflow exists in OpenSCAD when parsing STL files.
  Impact :

    A remote attacker could entice a user to open a specially crafted STL       file using OpenSCAD, possibly resulting in execution of arbitrary code       with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

远程主机会受到 GLSA-202107-35 中所述漏洞的影响（OpenSCAD：缓冲区溢出）

    解析 STL 文件时，OpenScad 中存在缓冲区溢出问题。
  影响：

    远程攻击者可引诱用户打开使用 OpenSCAD 特别构建的 STL 文件，从而可能造成以当前程序的相关权限执行任意代码或拒绝服务情形。
  变通方案：

    目前无任何已知的变通方案。

遠端主機會受到 GLSA-202107-35 中所述弱點的影響 (OpenSCAD：緩衝區溢位)

    剖析 STL 檔案時，OpenSCAD 中存在一個緩衝區溢位問題。
  影響：

    遠端攻擊者可引誘使用者開啟使用 OpenSCAD 的特製 STL 檔案，可能藉此以處理程序的權限來執行任意程式碼，或導致拒絕服務情形。
  因應措施：

    目前尚無已知的因應措施。

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8349f28cb9 advisory.

  - A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of     Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can     provide a malicious file to trigger this vulnerability. (CVE-2020-28599)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-793da7882b advisory.

  - A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of     Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can     provide a malicious file to trigger this vulnerability. (CVE-2020-28599)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2020-28599のセキュリティ修正。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
156976	GLSA-202107-35 : OpenSCAD: Buffer overflow	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
156976	GLSA-202107-35：OpenSCAD：缓冲区溢出	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
156976	GLSA-202107-35：OpenSCAD：緩衝區溢位	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
147180	Fedora 33 : openscad (2021-8349f28cb9)	Nessus	Fedora Local Security Checks	2021/3/8	2024/1/12	high
147183	Fedora 32 : openscad (2021-793da7882b)	Nessus	Fedora Local Security Checks	2021/3/8	2024/1/12	high
147180	Fedora 33：openscad（2021-8349f28cb9）	Nessus	Fedora Local Security Checks	2021/3/8	2024/1/12	high
147183	Fedora 32：openscad（2021-793da7882b）	Nessus	Fedora Local Security Checks	2021/3/8	2024/1/12	high

检测

插件搜索

high

high

high

high

high

high

high