PatchTheCVEopenscad vulnerabilities
Recent CVEs affecting openscad products. 3 tracked.
openscad has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-08-29. Highest priority: CVE-2020-28600 (score 50/100).
- CVE-2022-0497 HIGH 7.1 UPGRADE A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bound
- CVE-2022-0496 MEDIUM 5.5 UPGRADE A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!)
- CVE-2020-28600 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad opensc
FAQ
How do I fix openscad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openscad being exploited right now?
None of the tracked openscad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openscad CVE should I patch first?
CVE-2020-28600 currently ranks highest (50/100): An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad opensc.