The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3079-1 advisory.

    - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204)

    Other fixes:
    - Check for a nullptr returned from the shader manager
    - Fill image with transparency by default to avoid having junk if it's not filled properly before the     first paint call
    - Fix QTextureAtlas parenting that could lead to crashes due to being used after free'd.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

リモートの openSUSE 15 ホストにインストールされているパッケージは、openSUSE- SU-2024:0225-1 のアドバイザリに記載されている脆弱性の影響を受けます。

    - CVE-2024-40724: PLY インポータークラスのヒープベースのバッファオーバーフローを修正しました (boo#1228142)、

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの SUSE Linux SLES15 / openSUSE 15 ホストには、SUSE-SU-2024:3078-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    - CVE-2024-40724: assimp の PLY インポータークラスにおけるヒープベースバッファオーバーフローを修正しました (bsc#1228199)

    その他の修正:
    - シーン内のいずれかのオブジェクトが PrincipledMaterial を使用した場合に機能しない、プログレッシブアンチエイリアシングを修正します
    - ベンダー固有のものなど、不明なユニフォームの処理をスキップします。

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - バージョン 5.4.2 より前の Assimp におけるヒープベースのバッファオーバーフローの脆弱性により、ローカルの攻撃者が、特別に細工されたファイルを製品に入力することで、任意のコードを実行する可能性があります。 （CVE-2024-40724）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 5.4.2 之前的 Assimp 版本中有一個堆積型緩衝區溢位弱點，允許本機攻擊者將特製檔案輸入產品中，藉此執行任意程式碼。 (CVE-2024-40724)

請注意，Nessus 依賴供應商報告的套件存在。

リモートの SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 ホストには、SUSE-SU-2024:3079-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    - CVE-2024-40724: assimp の PLY インポータークラスにおけるヒープベースバッファオーバーフローを修正しました (bsc#1228204)

    その他の修正:
    - シェーダーマネージャーから返された nullptr をチェックします
    - デフォルトで、画像を透明で塗りつぶし、最初のペイント呼び出しの前に適切に画像が塗りつぶされない場合に、ジャンクが発生しないようにします
    - メモリ解放後使用 (Use After Free) によりクラッシュを引き起こす可能性がある QTextureAtlas ペアレンティングを修正します。

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 5.4.2 之前的 Assimp 版本中，存在基于堆的缓冲区溢出漏洞，允许本地攻击者通过将特制文件输入到产品中，来执行任意代码。 (CVE-2024-40724)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2975-1 advisory.

    - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204)

    Other fixes:
    - Check for a nullptr returned from the shader manager
    - Fill image with transparency by default to avoid having junk if it's not filled properly before the     first paint call
    - Fix QTextureAtlas parenting that could lead to crashes due to being used after free'd.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3078-1 advisory.

    - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228199)

    Other fixes:
    - Fix progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial
    - Skip processing unknown uniforms, such as those that are vendor specific:

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2984-1 advisory.

    - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class (bsc#1228204)
    - Checked for a nullptr returned from the shader manager
    - Fill image with transparency by default to avoid having junk if it's not filled properly before the     first paint call
    - Fixed QTextureAtlas parenting that could lead to crashes due to being used after free'd

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0225-1 advisory.

    - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class (boo#1228142),

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0271 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-48425:
    A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode     function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a     read access violation at address 0x000000000460, which points to the zero page, indicating a null or     invalid pointer dereference.

    CVE-2024-40724:
    Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to     execute arbitrary code by inputting a specially crafted file into the product.

    CVE-2024-48424:
    A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function     within the Assimp library, specifically during the processing of OpenGEX files.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to     execute arbitrary code by inputting a specially crafted file into the product. (CVE-2024-40724)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2976-1 advisory.

    - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204)

    Other fixes:
    - Check for a nullptr returned from the shader manager
    - Fill image with transparency by default to avoid having junk if it's not filled properly before the     first paint call
    - Fix QTextureAtlas parenting that could lead to crashes due to being used after free'd.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2985-1 advisory.

    - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class (bsc#1228199)
    - Fixed progressive anti-aliasing, which doesn't work if any object in the scene used a     PrincipledMaterial
    - Fixed a crash when a custom material/effect shader variable changes
    - Skipped processing unknown uniforms, as those that are vendor specific

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
206440	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libqt5-qt3d (SUSE-SU-2024:3079-1)	Nessus	SuSE Local Security Checks	2024/9/3	2024/9/3	high
204824	openSUSE 15 セキュリティ更新: assimp (openSUSE-SU-2024:0225-1)	Nessus	SuSE Local Security Checks	2024/7/28	2024/8/8	high
206436	SUSE SLES15 / openSUSE 15 セキュリティ更新 : libqt5-qtquick3d (SUSE-SU-2024:3078-1)	Nessus	SuSE Local Security Checks	2024/9/3	2024/9/3	high
229233	Linux Distros のパッチ未適用の脆弱性: CVE-2024-40724	Nessus	Misc.	2025/3/5	2025/9/3	high
229233	Linux Distros 未修補弱點：CVE-2024-40724	Nessus	Misc.	2025/3/5	2025/9/3	high
206440	SUSE SLED15 / SLES15 / openSUSE 15 セキュリティ更新 : libqt5-qt3d (SUSE-SU-2024:3079-1)	Nessus	SuSE Local Security Checks	2024/9/3	2024/9/3	high
229233	Linux Distros 未修补的漏洞: CVE-2024-40724	Nessus	Misc.	2025/3/5	2025/9/3	high
205993	SUSE SLES15 Security Update : libqt5-qt3d (SUSE-SU-2024:2975-1)	Nessus	SuSE Local Security Checks	2024/8/21	2024/9/30	high
206436	SUSE SLES15 / openSUSE 15 Security Update : libqt5-qtquick3d (SUSE-SU-2024:3078-1)	Nessus	SuSE Local Security Checks	2024/9/3	2024/9/3	high
205998	SUSE SLED15 / SLES15 Security Update : libqt5-qt3d (SUSE-SU-2024:2984-1)	Nessus	SuSE Local Security Checks	2024/8/21	2024/9/30	high
204824	openSUSE 15 Security Update : assimp (openSUSE-SU-2024:0225-1)	Nessus	SuSE Local Security Checks	2024/7/28	2024/8/8	high
238630	TencentOS Server 4: assimp (TSSA-2025:0271)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	high
229233	Linux Distros Unpatched Vulnerability : CVE-2024-40724	Nessus	Misc.	2025/3/5	2025/9/3	high
205999	SUSE SLES15 Security Update : libqt5-qt3d (SUSE-SU-2024:2976-1)	Nessus	SuSE Local Security Checks	2024/8/21	2024/9/30	high
206000	SUSE SLES15 Security Update : libqt5-qtquick3d (SUSE-SU-2024:2985-1)	Nessus	SuSE Local Security Checks	2024/8/21	2024/8/21	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high