Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next().

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal     CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which     could lead to code execution. An attacker can provide malicious input to trigger any of these     vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h     SNC_io_parser<EW>::read_sedge() seh->next(). (CVE-2020-28634)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
257697	Linux Distros Unpatched Vulnerability : CVE-2020-28634	Nessus	Misc.	high
176472	GLSA-202305-34 : CGAL: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
168418	Debian dla-3226 : libcgal-demo - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2020-28634

high

Tenable Plugins

high

critical

critical