A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

The remote host is affected by the vulnerability described in GLSA-202403-02 (Blender: Multiple Vulnerabilities)

  - An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an     attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior     to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0544)

  - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an     out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code     execution in the context of the Blender process when a specially crafted image file is loaded. This flaw     affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0545)

  - A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap     access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
    (CVE-2022-0546)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5176 advisory.

  - An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an     attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior     to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0544)

  - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an     out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code     execution in the context of the Blender process when a specially crafted image file is loaded. This flaw     affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0545)

  - A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap     access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
    (CVE-2022-0546)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3060 advisory.

  - An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an     attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior     to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0544)

  - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an     out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code     execution in the context of the Blender process when a specially crafted image file is loaded. This flaw     affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. (CVE-2022-0545)

  - A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap     access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
    (CVE-2022-0546)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191480	GLSA-202403-02 : Blender: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
162724	Debian DSA-5176-1 : blender - security update	Nessus	Debian Local Security Checks	high
162597	Debian DLA-3060-1 : blender - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-0546

high

Tenable Plugins

high

high

high