An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of     Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information     disclosure. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-28591)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-473e880567 advisory.

  - An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of     Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information     disclosure. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-28591)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-1d72d8cea2 advisory.

  - An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of     Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information     disclosure. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-28591)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256510	Linux Distros Unpatched Vulnerability : CVE-2020-28591	Nessus	Misc.	medium
148214	Fedora 33 : slic3r (2021-473e880567)	Nessus	Fedora Local Security Checks	medium
148204	Fedora 32 : slic3r (2021-1d72d8cea2)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-28591

medium

Tenable Plugins

medium

medium

medium