PatchTheCVEopenscad vulnerabilities and fixes
Recent CVEs affecting openscad, with upgrade or downgrade steps. 4 tracked.
openscad has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-08-29. Highest priority: CVE-2020-28599 (score 52/100).
- CVE-2022-0497 HIGH 7.1 UPGRADE A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bound
- CVE-2022-0496 MEDIUM 5.5 UPGRADE A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!)
- CVE-2020-28600 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad opensc
- CVE-2020-28599 HIGH 7.8 UPGRADE MITIGATE A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad
FAQ
How do I fix openscad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openscad being exploited right now?
None of the tracked openscad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openscad CVE should I patch first?
CVE-2020-28599 currently ranks highest (52/100): A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad.