Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-2832

Опубликовано: 16 авг. 2022
Источник: debian

Описание

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
blenderunfixedpackage

Примечания

  • https://developer.blender.org/T99706

  • https://developer.blender.org/D15463

  • https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c

  • Debian binary packages not build with WITH_HEADLESS

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

CVSS3: 5.1
redhat
больше 3 лет назад

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

CVSS3: 7.5
nvd
больше 3 лет назад

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

CVSS3: 7.5
github
больше 3 лет назад

When rendering with headless builds, show an error instead of crashing. Previously GPU_backend_init was called indirectly from DRW_opengl_context_create, a new function is now called from the window manager (GPU_backend_init_once), so it's possible to check if the GPU has a back-end. This also disables the bgl Python module when building WITH_HEADLESS.