An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an     out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code     execution in the context of the Blender process when a specially crafted image file is loaded. This flaw     affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0545)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202403-02 (Blender: Multiple Vulnerabilities)

  - An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an     attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior     to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0544)

  - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an     out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code     execution in the context of the Blender process when a specially crafted image file is loaded. This flaw     affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0545)

  - A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap     access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
    (CVE-2022-0546)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5176 advisory.

    Multiple vulnerabilities have been discovered in various image parsers in Blender, a 3D modeller/     renderer, which may result in denial of service or the execution of arbitrary code if a malformed file is     opened. For the oldstable distribution (buster), these problems have been fixed in version     2.79.b+dfsg0-7+deb10u1. For the stable distribution (bullseye), these problems have been fixed in version     2.83.5+dfsg-5+deb11u1. We recommend that you upgrade your blender packages. For the detailed security     status of blender please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/blender

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3060 advisory.

    Several issues have been found in blender, a very fast and versatile 3D modeller/renderer. CVE-2022-0546     An out-of-bounds heap access due to missing checks in the image loader could result in denial of service,     memory corruption or potentially code execution. CVE-2022-0545 An integer overflow while processing 2d     images might result in a write-what-where vulnerability or an out-of-bounds read vulnerability which could     leak sensitive information or achieve code execution. CVE-2022-0544 Crafted DDS image files could create     an integer underflow in the DDS loader which leads to an out-of-bounds read and might leak sensitive     information. For Debian 9 stretch, these problems have been fixed in version 2.79.b+dfsg0-1~deb9u2. We     recommend that you upgrade your blender packages. For the detailed security status of blender please refer     to its security tracker page at: https://security-tracker.debian.org/tracker/blender Further information     about Debian LTS security advisories, how to apply these updates to your system and frequently asked     questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
257384	Linux Distros Unpatched Vulnerability : CVE-2022-0545	Nessus	Misc.	high
191480	GLSA-202403-02 : Blender: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
162724	Debian DSA-5176-1 : blender - security update	Nessus	Debian Local Security Checks	high
162597	Debian DLA-3060-1 : blender - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-0545

high

Tenable Plugins

high

high

high

high