https://bugzilla.redhat.com/show_bug.cgi?id=2046366
Bug ID: 2046366 Summary: CVE-2021-45846 slic3r: NULL pointer dereference in AMF XML parser via a crafted AMF document Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: mhroncok@redhat.com, perl-devel@lists.fedoraproject.org Target Milestone: --- Classification: Other
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.
Reference: https://github.com/slic3r/Slic3r/issues/5117
https://bugzilla.redhat.com/show_bug.cgi?id=2046366
Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2046367
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2046367 [Bug 2046367] CVE-2021-45846 slic3r: NULL pointer dereference in AMF XML parser via a crafted AMF document [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2046366
--- Comment #1 from Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- Created slic3r tracking bugs for this issue:
Affects: fedora-all [bug 2046367]
https://bugzilla.redhat.com/show_bug.cgi?id=2046366
--- Comment #2 from Product Security DevOps Team prodsec-dev@redhat.com --- This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
https://bugzilla.redhat.com/show_bug.cgi?id=2046366
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |UPSTREAM Status|NEW |CLOSED Last Closed| |2022-01-26 17:02:11
https://bugzilla.redhat.com/show_bug.cgi?id=2046366 Bug 2046366 depends on bug 2046367, which changed state.
Bug 2046367 Summary: CVE-2021-45846 slic3r: NULL pointer dereference in AMF XML parser via a crafted AMF document [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2046367
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL
perl-devel@lists.fedoraproject.org