The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6945629745 advisory.

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6216-1 advisory.

    It was discovered that lib3mf did not properly manage memory under

    certain circumstances. If a user were tricked into opening a specially

    crafted 3MF file, a local attacker could possibly use this issue to

    cause applications using lib3mf to crash, resulting in a denial of

    service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b73f9c96ee advisory.

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

リモートの Ubuntu 20.04 LTS ホストには、USN-6216-1 のアドバイザリに記載された脆弱性の影響を受けるパッケージがインストールされています。

  - NMR 内のメモリ解放後使用 (Use After Free) の脆弱性。: COpcPackageReader: : 3MF Consortium lib3mf の releaseZIP() 機能 2.0.0。特別に細工された 3MF ファイルにより、コードが実行される可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2021-21772)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

3D 製造フォーマットの C++ 実装である Lib3MF にメモリ解放後使用 (use-after-free) が発見されました。このため、無効な形式のファイルが開かれた場合に、任意のコードの実行が引き起こされる可能性があります。

遠端 Ubuntu 20.04 LTS 主機上安裝的套件受到 USN-6216-1 公告中所提及的一個弱點影響。

  - 3MF Consortium lib3mf 2.0.0 中 NMR: : COpcPackageReader: : releaseZIP() 功能的釋放後使用弱點。藉由特別建構的 3MF 檔案可導致程式碼執行。攻擊者可透過提供惡意檔案來觸發此弱點。(CVE-2021-21772)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Ubuntu 20.04 LTS 主机上安装的多个程序包受到 USN-6216-1 公告中提及的一个漏洞影响。

  - NMR: : COpcPackageReader: : releaseZIP() 函数（属于 3MF Consortium lib3mf 2.0.0）中存在释放后使用漏洞。利用特别构建的 3MF 文件可导致代码执行，攻击者可提供恶意路径来触发此漏洞。(CVE-2021-21772)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

A use-after-free was discovered in Lib3MF, a C++ implementation of the 3D Manufacturing Format, which could result in the execution of arbitrary code if a malformed file is opened.

The remote host is affected by the vulnerability described in GLSA-202208-01 (3MF Consortium lib3mf: Remote code execution)

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

遠端主機受到 GLSA-202208-01 中所述的弱點影響 (3MF Consortium lib3mf：遠端程式碼執行)

  - 3MF Consortium lib3mf 2.0.0 的 NMR: : COpcPackageReader: : releaseZIP() 功能存在釋放後使用弱點。藉由特別建構的 3MF 檔案可導致程式碼執行。攻擊者可透過提供惡意檔案來觸發此弱點。(CVE-2021-21772)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

在 Lib3MF (3D 製造格式的 C++ 實作 ) 中發現釋放後使用弱點，如果開啟格式錯誤的檔案，可導致任意程式碼執行。

在 3D 制造格式的 C++ 实现 Lib3MF 中发现一个释放后使用漏洞，此漏洞可在打开畸形文件时导致任意代码执行。

远程主机受到 GLSA-202208-01 中所述漏洞的影响（3MF Consortium lib3mf：远程代码执行）

  - 3MF Consortium lib3mf 的 NMR: : COpcPackageReader: : releaseZIP() 功能存在释放后使用漏洞 2.0.0。利用特别构建的 3MF 文件可导致代码执行，攻击者可提供恶意路径来触发此漏洞。(CVE-2021-21772)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
148163	Fedora 32 : lib3mf (2021-6945629745)	Nessus	Fedora Local Security Checks	2021/3/26	2024/1/8	high
178211	Ubuntu 20.04 LTS : lib3mf vulnerability (USN-6216-1)	Nessus	Ubuntu Local Security Checks	2023/7/12	2024/8/27	high
148161	Fedora 33 : lib3mf (2021-b73f9c96ee)	Nessus	Fedora Local Security Checks	2021/3/26	2024/1/8	high
178211	Ubuntu 20.04 LTS : lib3mf の脆弱性 (USN-6216-1)	Nessus	Ubuntu Local Security Checks	2023/7/12	2024/8/27	high
148433	Debian DSA-4887-1 : lib3mf - セキュリティ更新	Nessus	Debian Local Security Checks	2021/4/12	2024/1/12	high
178211	Ubuntu 20.04 LTS：lib3mf 弱點 (USN-6216-1)	Nessus	Ubuntu Local Security Checks	2023/7/12	2024/8/27	high
178211	Ubuntu 20.04 LTS：lib3mf 漏洞 (USN-6216-1)	Nessus	Ubuntu Local Security Checks	2023/7/12	2024/8/27	high
148433	Debian DSA-4887-1 : lib3mf - security update	Nessus	Debian Local Security Checks	2021/4/12	2024/1/12	high
163841	GLSA-202208-01 : 3MF Consortium lib3mf: Remote code execution	Nessus	Gentoo Local Security Checks	2022/8/4	2023/10/16	high
163841	GLSA-202208-01：3MF Consortium lib3mf：遠端程式碼執行	Nessus	Gentoo Local Security Checks	2022/8/4	2023/10/16	high
148433	Debian DSA-4887-1：lib3mf - 安全性更新	Nessus	Debian Local Security Checks	2021/4/12	2024/1/12	high
148433	Debian DSA-4887-1：lib3mf - 安全更新	Nessus	Debian Local Security Checks	2021/4/12	2024/1/12	high
163841	GLSA-202208-01：3MF Consortium lib3mf：远程代码执行	Nessus	Gentoo Local Security Checks	2022/8/4	2023/10/16	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high