CVE-2022-0496

Name
CVE-2022-0496
Description
A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/openscad/openscad/commit/770e3234cbfe66edbc0333f796b46d36a74aa652
MISC https://bugzilla.redhat.com/show_bug.cgi?id=2050695
MISC https://github.com/openscad/openscad/issues/4037
MISC https://github.com/openscad/openscad/commit/00a4692989c4e2f191525f73f24ad8727bacdf41

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openscad:openscad:*:*:*:*:*:*:*:* openscad >= None < 2022-02-04

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openscad edge-community 2021.01-r19 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad edge-community 2021.01-r18 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad edge-community 2021.01-r17 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad edge-community 2021.01-r16 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad edge-community 2021.01-r15 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad edge-community 2021.01-r14 Marian Buschsieweke <marian.buschsieweke@ovgu.de> fixed
openscad edge-community 2021.01-r13 Marian Buschsieweke <marian.buschsieweke@ovgu.de> fixed
openscad edge-community 2021.01-r2 None fixed
openscad 3.24-community 2021.01-r19 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad 3.23-community 2021.01-r18 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad 3.22-community 2021.01-r16 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad 3.22-community 2021.01-r15 Marian Buschsieweke <marian.buschsieweke@posteo.net> fixed
openscad 3.22-community 2021.01-r2 None fixed
openscad 3.21-community 2021.01-r2 None fixed
openscad 3.20-community 2021.01-r14 Marian Buschsieweke <marian.buschsieweke@ovgu.de> fixed
openscad 3.20-community 2021.01-r2 None fixed