A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6216-1 advisory.

    It was discovered that lib3mf did not properly manage memory under

    certain circumstances. If a user were tricked into opening a specially

    crafted 3MF file, a local attacker could possibly use this issue to

    cause applications using lib3mf to crash, resulting in a denial of

    service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-01 (3MF Consortium lib3mf: Remote code execution)

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A use-after-free was discovered in Lib3MF, a C++ implementation of the 3D Manufacturing Format, which could result in the execution of arbitrary code if a malformed file is opened.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6945629745 advisory.

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b73f9c96ee advisory.

  - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF     Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2021-21772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
178211	Ubuntu 20.04 LTS : lib3mf vulnerability (USN-6216-1)	Nessus	Ubuntu Local Security Checks	high
163841	GLSA-202208-01 : 3MF Consortium lib3mf: Remote code execution	Nessus	Gentoo Local Security Checks	high
148433	Debian DSA-4887-1 : lib3mf - security update	Nessus	Debian Local Security Checks	high
148163	Fedora 32 : lib3mf (2021-6945629745)	Nessus	Fedora Local Security Checks	high
148161	Fedora 33 : lib3mf (2021-b73f9c96ee)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2021-21772

high

Tenable Plugins

high

high

high

high

high