There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily
    malformed!) properties may cause an out-of-bounds memory access when imported using import().
    (CVE-2022-0496)

  - A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-
    bounds read during parsing of annotations. (CVE-2022-0497)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Openscad 中發現一個弱點使用 import() 匯入時具有特定 (不一定格式錯誤!) 內容的 DXF 格式繪圖可能會造成超出邊界記憶體存取。
    (CVE-2022-0496)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Openscad 中发现一个漏洞具有特定不一定是畸形属性的 DXF 格式绘图在使用 import() 导入时可能会造成越界内存访问。
    (CVE-2022-0496)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Openscad に脆弱性が見つかりました。特定のプロパティが含まれている DXF 形式の描画で、import() を使用してインポートされた場合に領域外メモリアクセスが発生する可能性があります。
    (CVE-2022-0496)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-2e64749f77 advisory.

    Automatic update for openscad-2021.01-8.fc37.

    ##### **Changelog**

    ```
    * Tue Apr  5 2022 Lumr Balhar <lbalhar@redhat.com> - 2021.01-8
    - Security fixes for CVE-2022-0496 and CVE-2022-0497
    - Fixes: rhbz#2050696 rhbz#2050700

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily     malformed!) properties may cause an out-of-bounds memory access when imported using import().
    (CVE-2022-0496)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
409768	Alpine: openscad: security update to 2021.01-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	10/5/2022	7/6/2026	high
426915	Alpine: multiple openscad packages: security update to 2021.01-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	5/16/2025	7/6/2026	high
426915	Alpine: multiple openscad packages: security update to 2021.01-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	5/16/2025	7/6/2026	high
409768	Alpine: openscad: security update to 2021.01-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/5/2022	7/6/2026	high
229974	Linux Distros 未修補的弱點：CVE-2022-0496	Nessus	Misc.	3/5/2025	4/28/2026	medium
229974	Linux Distros 未修补的漏洞：CVE-2022-0496	Nessus	Misc.	3/5/2025	4/28/2026	medium
229974	Linux Distros のパッチ未適用の脆弱性: CVE-2022-0496	Nessus	Misc.	3/5/2025	4/28/2026	medium
211183	Fedora 37 : openscad (2022-2e64749f77)	Nessus	Fedora Local Security Checks	11/14/2024	11/14/2024	high
229974	Linux Distros Unpatched Vulnerability : CVE-2022-0496	Nessus	Misc.	3/5/2025	4/28/2026	medium

Detections

Analytics

Plugins Search

high

high

high

high

medium

medium

medium

high

medium