[Bug 2046372] New: CVE-2021-45847 slic3r: NULL pointer dereference in 3MF XML via a crafted 3MF input file
https://bugzilla.redhat.com/show_bug.cgi?id=2046372
Bug ID: 2046372 Summary: CVE-2021-45847 slic3r: NULL pointer dereference in 3MF XML via a crafted 3MF input file Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: mhroncok@redhat.com, perl-devel@lists.fedoraproject.org Target Milestone: --- Classification: Other
Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
References: https://github.com/slic3r/Slic3r/issues/5118 https://github.com/slic3r/Slic3r/issues/5119 https://github.com/slic3r/Slic3r/issues/5120
https://bugzilla.redhat.com/show_bug.cgi?id=2046372
Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2046373
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2046373 [Bug 2046373] CVE-2021-45847 slic3r: NULL pointer dereference in 3MF XML via a crafted 3MF input file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2046372
--- Comment #1 from Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- Created slic3r tracking bugs for this issue:
Affects: fedora-all [bug 2046373]
https://bugzilla.redhat.com/show_bug.cgi?id=2046372
--- Comment #2 from Product Security DevOps Team prodsec-dev@redhat.com --- This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
https://bugzilla.redhat.com/show_bug.cgi?id=2046372
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |UPSTREAM Last Closed| |2022-01-26 17:31:07
https://bugzilla.redhat.com/show_bug.cgi?id=2046372 Bug 2046372 depends on bug 2046373, which changed state.
Bug 2046373 Summary: CVE-2021-45847 slic3r: NULL pointer dereference in 3MF XML via a crafted 3MF input file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2046373
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL
perl-devel@lists.fedoraproject.org
-
bugzilla＠redhat.com