[Bug 2064172] New: CVE-2021-44961 slic3r: specially crafted stl files can exhaust available memory
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
Bug ID: 2064172 Summary: CVE-2021-44961 slic3r: specially crafted stl files can exhaust available memory Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: mrehak@redhat.com CC: mhroncok@redhat.com, perl-devel@lists.fedoraproject.org Target Milestone: --- Classification: Other
A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.
Reference:
https://hackmd.io/nDT_UKLyRQendxDwil9A4w
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
Marian Rehak mrehak@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2064173
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2064173 [Bug 2064173] CVE-2021-44961 slic3r: specially crafted stl files can exhaust available memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
--- Comment #1 from Marian Rehak mrehak@redhat.com --- Created slic3r tracking bugs for this issue:
Affects: fedora-all [bug 2064173]
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
--- Comment #2 from Product Security DevOps Team prodsec-dev@redhat.com --- This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |UPSTREAM Last Closed| |2022-03-15 13:01:41
https://bugzilla.redhat.com/show_bug.cgi?id=2064172 Bug 2064172 depends on bug 2064173, which changed state.
Bug 2064173 Summary: CVE-2021-44961 slic3r: specially crafted stl files can exhaust available memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064173
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL
perl-devel@lists.fedoraproject.org
-
bugzilla＠redhat.com