CVE-2021-45847

Опубликовано: 25 янв. 2022

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

Ссылки

https://github.com/slic3r/Slic3r/issues/5118
Issue Tracking
Mitigation
Patch
Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5119
Issue Tracking
Mitigation
Patch
Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5120
Issue Tracking
Mitigation
Patch
Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5118
Issue Tracking
Mitigation
Patch
Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5119
Issue Tracking
Mitigation
Patch
Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5120
Issue Tracking
Mitigation
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:slic3r:slic3r:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00104

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2021-45847

CVSS3: 5.5

ubuntu

около 4 лет назад

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

CVE-2021-45847

CVSS3: 5.5

debian

около 4 лет назад

Several missing input validations in the 3MF parser component of Slic3 ...

GHSA-mg95-x73r-76mg

github

около 4 лет назад

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

EPSS

Процентиль: 29%

0.00104

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476