PT-2021-3357 · 3Mf Consortium+2 · Lib3Mf+2

Lilith >_> · Published 2021-02-11 · Updated 2023-07-11 · CVE-2021-21772

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 3MF Consortium lib3mf version 2.0.0

Description A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality. This issue is related to the use of memory after it has been freed. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code using a specially crafted 3MF file. An attacker can provide a malicious file to trigger this vulnerability.

Recommendations For version 2.0.0, consider disabling the NMR::COpcPackageReader::releaseZIP() function until a patch is available to prevent potential exploitation. Restrict access to the lib3mf library to minimize the risk of exploitation. Avoid using specially crafted 3MF files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2021-03180

CVE-2021-21772

DSA-4887-1

MGASA-2021-0368

USN-6216-1

Affected Products

Linuxmint

Ubuntu

Lib3Mf

References · 32

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226 · Exploit
• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1226 · Exploit
• https://osv.dev/vulnerability/DSA-4887-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NPBS642OYVA6DUKK3HZHEINVWEDZSMEU · Vendor Advisory
• https://security.gentoo.org/glsa/202208-01 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPBS642OYVA6DUKK3HZHEINVWEDZSMEU · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-21772 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03180 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-21772 · Security Note
• https://ubuntu.com/security/CVE-2021-21772 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IHMMHD2EOMIVJ7EKZTJJMX4C7E6ZRWDL · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-21772 · Security Note
• https://ubuntu.com/security/notices/USN-6216-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/WDGGB65YBQL662M3MOBNNJJNRNURW4TG · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21772 · Vendor Advisory